We have extended our tutorial for publishing Python packages to include the digital attestations signed by PyPI:
python-basics-tutorial.readthedocs.io/en/latest/pa...
This significantly increases supply-chain security.
#Python #PyPI #SupplyChainSecurity
python-basics-tutorial.readthedocs.io
Upload package
Finally, you can deploy the package on the Python Package Index( PyPI) or another index, for example GitLab Package Registry or devpi. For the Python Package Index, you must register with Test PyPI...
0 3 22
