What's Changed
Bug Fixes 🕷
New Contributors
Full Changelog: 2.1.1...2.1.2
Release asset details:
SHA256 checksums
b01598add7fa84cd38a65b55c9f11ae9a6edaddca08d5b6aa5e88002a2271d47 pywemo-2.1.2-py3-none-any.whl
d8ae6809aabce69522cf0157fd0d1163b18ce80ceaacd7c89a46a9c3beec536b pywemo-2.1.2.tar.gz
How to verify sigstore signatures
Visit sigstore.dev to learn more about sigstore signing and verification.
Certificate identity:
https://github.com/pywemo/pywemo/.github/workflows/publish.yml@refs/tags/2.1.2
Verify with sigstore-python:
# Download the release wheel and .sigstore file.
wget https://github.com/pywemo/pywemo/releases/download/2.1.2/pywemo-2.1.2-py3-none-any.whl
wget https://github.com/pywemo/pywemo/releases/download/2.1.2/pywemo-2.1.2-py3-none-any.whl.sigstore.json
# Install sigstore: https://github.com/sigstore/sigstore-python#installation
python -m pip install sigstore
# Verify that the wheel was built from this release.
python -m sigstore verify github \
--bundle pywemo-2.1.2-py3-none-any.whl.sigstore.json \
--cert-identity https://github.com/pywemo/pywemo/.github/workflows/publish.yml@refs/tags/2.1.2 \
--sha fc8225b93692b15992100094f12b84d8866d8a5b \
pywemo-2.1.2-py3-none-any.whlHow to verify SLSA provenance
Visit slsa.dev to learn more about generating and verifying software provenance with SLSA.
SLSA verifier installation instructions can be found at github.com/slsa-framework/slsa-verifier#installation.
# Download the release wheel and .intoto.jsonl file.
wget https://github.com/pywemo/pywemo/releases/download/2.1.2/pywemo-2.1.2-py3-none-any.whl
wget https://github.com/pywemo/pywemo/releases/download/2.1.2/pywemo-2.1.2.intoto.jsonl
# Verify that the wheel was built from this release.
slsa-verifier verify-artifact \
--provenance-path pywemo-2.1.2.intoto.jsonl \
--source-uri github.com/pywemo/pywemo \
--source-tag 2.1.2 \
pywemo-2.1.2-py3-none-any.whlContributors
kaloz