Packages / openSUSE Tumbleweed / Unspecified / python313-sigstore

Package: python313-sigstore (4.2.0-2.2)

A tool for signing Python package distributions

sigstore is a Python tool for generating and verifying Sigstore signatures. You can use it to sign and verify Python package distributions, or anything else!

Other Packages Related to python313-sigstore:

  • dep: (python313-importlib_resources if python313-base < 3.11)

    Package not available

  • dep: /bin/sh

    Package not available

  • dep: /bin/sh

    Package not available

  • dep: /usr/bin/python3.13

    Package not available

  • dep: [alts]

    Helper for executing preferred application based on user preferences

  • dep: python(abi) (= 3.13)

    Package not available

  • dep: [python313-PyJWT] (>= 2.1)

    JSON Web Token implementation in Python

  • dep: [python313-cryptography] (>= 42)

    Python library which exposes cryptographic recipes and primitives

  • dep: [python313-id] (>= 1.1.0)

    A tool for generating OIDC identities

  • dep: [python313-platformdirs] (>= 4.2)

    Module for determining appropriate platform-specific dirs

  • dep: [python313-pyOpenSSL] (>= 23.0.0)

    Python wrapper module around the OpenSSL library

  • dep: [python313-pyasn1] (>= 0.6)

    ASN.1 types and codecs

  • dep: [python313-pydantic] (>= 2)

    Data validation and settings management using python type hinting

  • dep: [python313-requests]

    Python HTTP Library

  • dep: [python313-rfc3161-client]

    Python library implementing the Time-Stamp Protocol (TSP) described in RFC 3161

  • dep: [python313-rfc8785] (>= 0.1.2)

    A pure-Python implementation of RFC 8785

  • dep: [python313-rich] (>= 13.0)

    A Python library for rich text and beautiful formatting in the terminal

  • dep: [python313-sigstore-models]

    Pydantic based models for Sigstore's protobuf specifications

  • dep: [python313-sigstore-rekor-types] (= 0.0.18)

    Python models for Rekor's API types

  • dep: [python313-tuf] (>= 6.0)

    A secure updater framework for Python

Download python313-sigstore

ArchitecturePackage sizeInstalled sizeFilesPackage
noarch186 KiB654 KiBlist of filesDownload

Package file paths (132)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/bin/sigstore
  • /usr/bin/sigstore-3.13
  • /usr/lib/python3.13/site-packages/sigstore
  • /usr/lib/python3.13/site-packages/sigstore-4.2.0.dist-info
  • /usr/lib/python3.13/site-packages/sigstore-4.2.0.dist-info/entry_points.txt
  • /usr/lib/python3.13/site-packages/sigstore-4.2.0.dist-info/INSTALLER
  • /usr/lib/python3.13/site-packages/sigstore-4.2.0.dist-info/licenses
  • /usr/lib/python3.13/site-packages/sigstore-4.2.0.dist-info/licenses/LICENSE
  • /usr/lib/python3.13/site-packages/sigstore-4.2.0.dist-info/METADATA
  • /usr/lib/python3.13/site-packages/sigstore-4.2.0.dist-info/RECORD
  • /usr/lib/python3.13/site-packages/sigstore-4.2.0.dist-info/REQUESTED
  • /usr/lib/python3.13/site-packages/sigstore-4.2.0.dist-info/WHEEL
  • /usr/lib/python3.13/site-packages/sigstore/_cli.py
  • /usr/lib/python3.13/site-packages/sigstore/dsse
  • /usr/lib/python3.13/site-packages/sigstore/dsse/__init__.py
  • /usr/lib/python3.13/site-packages/sigstore/dsse/_predicate.py
  • /usr/lib/python3.13/site-packages/sigstore/dsse/__pycache__
  • /usr/lib/python3.13/site-packages/sigstore/dsse/__pycache__/__init__.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/dsse/__pycache__/__init__.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/dsse/__pycache__/_predicate.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/dsse/__pycache__/_predicate.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/errors.py
  • /usr/lib/python3.13/site-packages/sigstore/hashes.py
  • /usr/lib/python3.13/site-packages/sigstore/__init__.py
  • /usr/lib/python3.13/site-packages/sigstore/_internal
  • /usr/lib/python3.13/site-packages/sigstore/_internal/fulcio
  • /usr/lib/python3.13/site-packages/sigstore/_internal/fulcio/client.py
  • /usr/lib/python3.13/site-packages/sigstore/_internal/fulcio/__init__.py
  • /usr/lib/python3.13/site-packages/sigstore/_internal/fulcio/__pycache__
  • /usr/lib/python3.13/site-packages/sigstore/_internal/fulcio/__pycache__/client.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/fulcio/__pycache__/client.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/fulcio/__pycache__/__init__.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/fulcio/__pycache__/__init__.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/__init__.py
  • /usr/lib/python3.13/site-packages/sigstore/_internal/key_details.py
  • /usr/lib/python3.13/site-packages/sigstore/_internal/merkle.py
  • /usr/lib/python3.13/site-packages/sigstore/_internal/oidc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/oidc/__init__.py
  • /usr/lib/python3.13/site-packages/sigstore/_internal/oidc/oauth.py
  • /usr/lib/python3.13/site-packages/sigstore/_internal/oidc/__pycache__
  • /usr/lib/python3.13/site-packages/sigstore/_internal/oidc/__pycache__/__init__.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/oidc/__pycache__/__init__.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/oidc/__pycache__/oauth.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/oidc/__pycache__/oauth.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/__pycache__
  • /usr/lib/python3.13/site-packages/sigstore/_internal/__pycache__/__init__.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/__pycache__/__init__.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/__pycache__/key_details.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/__pycache__/key_details.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/__pycache__/merkle.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/__pycache__/merkle.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/__pycache__/sct.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/__pycache__/sct.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/__pycache__/timestamp.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/__pycache__/timestamp.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/__pycache__/trust.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/__pycache__/trust.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/__pycache__/tuf.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/__pycache__/tuf.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/rekor
  • /usr/lib/python3.13/site-packages/sigstore/_internal/rekor/checkpoint.py
  • /usr/lib/python3.13/site-packages/sigstore/_internal/rekor/client.py
  • /usr/lib/python3.13/site-packages/sigstore/_internal/rekor/client_v2.py
  • /usr/lib/python3.13/site-packages/sigstore/_internal/rekor/__init__.py
  • /usr/lib/python3.13/site-packages/sigstore/_internal/rekor/__pycache__
  • /usr/lib/python3.13/site-packages/sigstore/_internal/rekor/__pycache__/checkpoint.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/rekor/__pycache__/checkpoint.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/rekor/__pycache__/client.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/rekor/__pycache__/client.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/rekor/__pycache__/client_v2.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/rekor/__pycache__/client_v2.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/rekor/__pycache__/__init__.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/rekor/__pycache__/__init__.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_internal/sct.py
  • /usr/lib/python3.13/site-packages/sigstore/_internal/timestamp.py
  • /usr/lib/python3.13/site-packages/sigstore/_internal/trust.py
  • /usr/lib/python3.13/site-packages/sigstore/_internal/tuf.py
  • /usr/lib/python3.13/site-packages/sigstore/__main__.py
  • /usr/lib/python3.13/site-packages/sigstore/models.py
  • /usr/lib/python3.13/site-packages/sigstore/oidc.py
  • /usr/lib/python3.13/site-packages/sigstore/__pycache__
  • /usr/lib/python3.13/site-packages/sigstore/__pycache__/_cli.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/__pycache__/_cli.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/__pycache__/errors.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/__pycache__/errors.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/__pycache__/hashes.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/__pycache__/hashes.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/__pycache__/__init__.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/__pycache__/__init__.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/__pycache__/__main__.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/__pycache__/__main__.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/__pycache__/models.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/__pycache__/models.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/__pycache__/oidc.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/__pycache__/oidc.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/__pycache__/sign.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/__pycache__/sign.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/__pycache__/_utils.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/__pycache__/_utils.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/py.typed
  • /usr/lib/python3.13/site-packages/sigstore/sign.py
  • /usr/lib/python3.13/site-packages/sigstore/_store
  • /usr/lib/python3.13/site-packages/sigstore/_store/https%3A%2F%2Ftuf-repo-cdn.sigstage.dev
  • /usr/lib/python3.13/site-packages/sigstore/_store/https%3A%2F%2Ftuf-repo-cdn.sigstage.dev/root.json
  • /usr/lib/python3.13/site-packages/sigstore/_store/https%3A%2F%2Ftuf-repo-cdn.sigstage.dev/signing_config.v0.2.json
  • /usr/lib/python3.13/site-packages/sigstore/_store/https%3A%2F%2Ftuf-repo-cdn.sigstage.dev/trusted_root.json
  • /usr/lib/python3.13/site-packages/sigstore/_store/https%3A%2F%2Ftuf-repo-cdn.sigstore.dev
  • /usr/lib/python3.13/site-packages/sigstore/_store/https%3A%2F%2Ftuf-repo-cdn.sigstore.dev/root.json
  • /usr/lib/python3.13/site-packages/sigstore/_store/https%3A%2F%2Ftuf-repo-cdn.sigstore.dev/signing_config.v0.2.json
  • /usr/lib/python3.13/site-packages/sigstore/_store/https%3A%2F%2Ftuf-repo-cdn.sigstore.dev/trusted_root.json
  • /usr/lib/python3.13/site-packages/sigstore/_store/__init__.py
  • /usr/lib/python3.13/site-packages/sigstore/_store/__pycache__
  • /usr/lib/python3.13/site-packages/sigstore/_store/__pycache__/__init__.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_store/__pycache__/__init__.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/_utils.py
  • /usr/lib/python3.13/site-packages/sigstore/verify
  • /usr/lib/python3.13/site-packages/sigstore/verify/__init__.py
  • /usr/lib/python3.13/site-packages/sigstore/verify/policy.py
  • /usr/lib/python3.13/site-packages/sigstore/verify/__pycache__
  • /usr/lib/python3.13/site-packages/sigstore/verify/__pycache__/__init__.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/verify/__pycache__/__init__.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/verify/__pycache__/policy.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/verify/__pycache__/policy.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/verify/__pycache__/verifier.cpython-313.opt-1.pyc
  • /usr/lib/python3.13/site-packages/sigstore/verify/__pycache__/verifier.cpython-313.pyc
  • /usr/lib/python3.13/site-packages/sigstore/verify/verifier.py
  • /usr/share/doc/packages/python313-sigstore
  • /usr/share/doc/packages/python313-sigstore/README.md
  • /usr/share/libalternatives/sigstore
  • /usr/share/libalternatives/sigstore/1313.conf
  • /usr/share/licenses/python313-sigstore
  • /usr/share/licenses/python313-sigstore/LICENSE

Field source: openSUSE Tumbleweed OSS

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
4.2.0-2.2tumbleweed / ossnoarchopenSUSE Tumbleweed · OSS · multi-architecture186 KiB654 KiBnoarch/python313-sigstore-4.2.0-2.2.noarch.rpm

Field source: openSUSE Tumbleweed OSS

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVESeverityVersion impact
[CVE-2026-24408]

Published:

python311-sigstore-4.2.0-1.1 on GA media

UnknownUnknown
Details (1)
  • 4.2.0-2.2 · noarch · tumbleweed

    Unknown · Fixed: 4.2.0-1.1

    Version impact unknown

    pypi · python-sigstore · opensuse · tumbleweed

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

4.2.0-2.2 / noarchObserved Sep 1, 2026sha512 bafee0dc5b25…677e369cSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): bafee0dc5b2522592f6fefc970db74a5e737a30c184e8ac149285c9b7d23e5ebbd4fcbebba9a36e055ffd3b245668e3def5b37a63822a87d4b1ca967677e369c

Field source: openSUSE Tumbleweed OSS

Sources

  • Authoritative source; repository metadata signature verified

    Signature evidence

    tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f

    Repository-signature verification record
    Signed-object SHA-256
    4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
    Signer fingerprint
    AD485664E901B867051AB15F35A2F86E29B700A4
    Keyring revision
    opensuse-project-signing-key.asc
    SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Result
    Recorded as verified; digest details unavailable