Event JSON
{
"id": "da3f47e84564346bce4da1fd16d750ce6d487fd9ec231d3d3af38abf01f5c673",
"pubkey": "80c3b8e02adcc74ca668aa82aee685ade3dfa8d773f87f652af03c654785c4aa",
"created_at": 1732127538,
"kind": 1,
"tags": [
[
"t",
"pypi"
],
[
"t",
"python"
],
[
"t",
"security"
],
[
"imeta",
"url https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/516/708/090/316/612/original/4c179c2ffb85ef14.png",
"m image/png",
"dim 1464x1038",
"blurhash U04_-1_NN2R8=_$+W,W-V:jDenWBE2R-xbaf"
],
[
"proxy",
"https://infosec.exchange/users/yossarian/statuses/113516710381367457",
"activitypub"
]
],
"content": "PyPI's support for attestations (PEP 740) now includes GitLab, extending support beyond the initial scope (which was GitHub). that means that, if you're a GitLab CI/CD user, you can now upload attestations to PyPI and the index will verify and re-serve them!\n\ndocs here: https://docs.pypi.org/attestations/producing-attestations/#gitlab-cicd\n\n#pypi #python #security\n\nhttps://media.infosec.exchange/infosec.exchange/media_attachments/files/113/516/708/090/316/612/original/4c179c2ffb85ef14.png",
"sig": "d5d5a1363e22c9272dd830a4d3ef351b24552766e871a824ff6f22e92234fbb6bd919f841d4fdc481500a44150dc53f7653c0b724c57cfc7f594c797896b6c74"
}