corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a07d5d-9e53-73bc-a153-c0bc2873b47b

Why pylock.toml includes digital attestations

Brett Cannon · published 26 March 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at snarky.ca Wayback capture
2blogs citing
First cited
4 Apr 2026
Most recent
8 Apr 2026
Rank this month
not ranked
Links from this post
14
Words captured
689

Cited by

Blog
In the post
Date
406.ch
Switching all of my Python packages to PyPI trusted publishing Read at the source ↗
8 Apr 2026
Core Dispatch
Core Dispatch #1 Read at the source ↗
4 Apr 2026

Links from this post

Link
Host
https://docs.litellm.ai/blog/security-update-march-2026
docs.litellm.ai
https://mastodon.social/@brettcannon/116285324855374142
mastodon.social
https://docs.pypi.org/trusted-publishers/
docs.pypi.org
https://docs.pypi.org/attestations/
docs.pypi.org
https://packaging.python.org/en/latest/specifications/pylock-toml/
packaging.python.org
https://fosstodon.org/@jni/116287554201659198
fosstodon.org
Why it took 4 years to get a lock files specification Read at the source ↗
snarky.ca
https://github.com/pypa/gh-action-pypi-publish
github.com
https://docs.pypi.org/attestations/producing-attestations/
docs.pypi.org
https://pypi.org/project/packaging/
pypi.org
https://pypi.org/integrity/packaging/26.0/packaging-26.0-py3-none-any.whl/provenance
pypi.org
https://pypi.org/project/packaging/26.0/
pypi.org
https://packaging.python.org/en/latest/specifications/simple-repository-api/
packaging.python.org
https://peps.python.org/pep-0751/
peps.python.org