Packages / openSUSE Tumbleweed / Unspecified / python314-sigstore

Package: python314-sigstore (4.2.0-2.2)

A tool for signing Python package distributions

sigstore is a Python tool for generating and verifying Sigstore signatures. You can use it to sign and verify Python package distributions, or anything else!

Other Packages Related to python314-sigstore:

  • dep: (python314-importlib_resources if python314-base < 3.11)

    Package not available

  • dep: /bin/sh

    Package not available

  • dep: /bin/sh

    Package not available

  • dep: /usr/bin/python3.14

    Package not available

  • dep: [alts]

    Helper for executing preferred application based on user preferences

  • dep: python(abi) (= 3.14)

    Package not available

  • dep: [python314-PyJWT] (>= 2.1)

    JSON Web Token implementation in Python

  • dep: [python314-cryptography] (>= 42)

    Python library which exposes cryptographic recipes and primitives

  • dep: [python314-id] (>= 1.1.0)

    A tool for generating OIDC identities

  • dep: [python314-platformdirs] (>= 4.2)

    Module for determining appropriate platform-specific dirs

  • dep: [python314-pyOpenSSL] (>= 23.0.0)

    Python wrapper module around the OpenSSL library

  • dep: [python314-pyasn1] (>= 0.6)

    ASN.1 types and codecs

  • dep: [python314-pydantic] (>= 2)

    Data validation and settings management using python type hinting

  • dep: [python314-requests]

    Python HTTP Library

  • dep: [python314-rfc3161-client]

    Python library implementing the Time-Stamp Protocol (TSP) described in RFC 3161

  • dep: [python314-rfc8785] (>= 0.1.2)

    A pure-Python implementation of RFC 8785

  • dep: [python314-rich] (>= 13.0)

    A Python library for rich text and beautiful formatting in the terminal

  • dep: [python314-sigstore-models]

    Pydantic based models for Sigstore's protobuf specifications

  • dep: [python314-sigstore-rekor-types] (= 0.0.18)

    Python models for Rekor's API types

  • dep: [python314-tuf] (>= 6.0)

    A secure updater framework for Python

Download python314-sigstore

ArchitecturePackage sizeInstalled sizeFilesPackage
noarch192 KiB695 KiBlist of filesDownload

Package file paths (132)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/bin/sigstore
  • /usr/bin/sigstore-3.14
  • /usr/lib/python3.14/site-packages/sigstore
  • /usr/lib/python3.14/site-packages/sigstore-4.2.0.dist-info
  • /usr/lib/python3.14/site-packages/sigstore-4.2.0.dist-info/entry_points.txt
  • /usr/lib/python3.14/site-packages/sigstore-4.2.0.dist-info/INSTALLER
  • /usr/lib/python3.14/site-packages/sigstore-4.2.0.dist-info/licenses
  • /usr/lib/python3.14/site-packages/sigstore-4.2.0.dist-info/licenses/LICENSE
  • /usr/lib/python3.14/site-packages/sigstore-4.2.0.dist-info/METADATA
  • /usr/lib/python3.14/site-packages/sigstore-4.2.0.dist-info/RECORD
  • /usr/lib/python3.14/site-packages/sigstore-4.2.0.dist-info/REQUESTED
  • /usr/lib/python3.14/site-packages/sigstore-4.2.0.dist-info/WHEEL
  • /usr/lib/python3.14/site-packages/sigstore/_cli.py
  • /usr/lib/python3.14/site-packages/sigstore/dsse
  • /usr/lib/python3.14/site-packages/sigstore/dsse/__init__.py
  • /usr/lib/python3.14/site-packages/sigstore/dsse/_predicate.py
  • /usr/lib/python3.14/site-packages/sigstore/dsse/__pycache__
  • /usr/lib/python3.14/site-packages/sigstore/dsse/__pycache__/__init__.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/dsse/__pycache__/__init__.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/dsse/__pycache__/_predicate.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/dsse/__pycache__/_predicate.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/errors.py
  • /usr/lib/python3.14/site-packages/sigstore/hashes.py
  • /usr/lib/python3.14/site-packages/sigstore/__init__.py
  • /usr/lib/python3.14/site-packages/sigstore/_internal
  • /usr/lib/python3.14/site-packages/sigstore/_internal/fulcio
  • /usr/lib/python3.14/site-packages/sigstore/_internal/fulcio/client.py
  • /usr/lib/python3.14/site-packages/sigstore/_internal/fulcio/__init__.py
  • /usr/lib/python3.14/site-packages/sigstore/_internal/fulcio/__pycache__
  • /usr/lib/python3.14/site-packages/sigstore/_internal/fulcio/__pycache__/client.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/fulcio/__pycache__/client.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/fulcio/__pycache__/__init__.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/fulcio/__pycache__/__init__.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/__init__.py
  • /usr/lib/python3.14/site-packages/sigstore/_internal/key_details.py
  • /usr/lib/python3.14/site-packages/sigstore/_internal/merkle.py
  • /usr/lib/python3.14/site-packages/sigstore/_internal/oidc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/oidc/__init__.py
  • /usr/lib/python3.14/site-packages/sigstore/_internal/oidc/oauth.py
  • /usr/lib/python3.14/site-packages/sigstore/_internal/oidc/__pycache__
  • /usr/lib/python3.14/site-packages/sigstore/_internal/oidc/__pycache__/__init__.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/oidc/__pycache__/__init__.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/oidc/__pycache__/oauth.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/oidc/__pycache__/oauth.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/__pycache__
  • /usr/lib/python3.14/site-packages/sigstore/_internal/__pycache__/__init__.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/__pycache__/__init__.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/__pycache__/key_details.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/__pycache__/key_details.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/__pycache__/merkle.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/__pycache__/merkle.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/__pycache__/sct.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/__pycache__/sct.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/__pycache__/timestamp.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/__pycache__/timestamp.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/__pycache__/trust.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/__pycache__/trust.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/__pycache__/tuf.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/__pycache__/tuf.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/rekor
  • /usr/lib/python3.14/site-packages/sigstore/_internal/rekor/checkpoint.py
  • /usr/lib/python3.14/site-packages/sigstore/_internal/rekor/client.py
  • /usr/lib/python3.14/site-packages/sigstore/_internal/rekor/client_v2.py
  • /usr/lib/python3.14/site-packages/sigstore/_internal/rekor/__init__.py
  • /usr/lib/python3.14/site-packages/sigstore/_internal/rekor/__pycache__
  • /usr/lib/python3.14/site-packages/sigstore/_internal/rekor/__pycache__/checkpoint.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/rekor/__pycache__/checkpoint.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/rekor/__pycache__/client.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/rekor/__pycache__/client.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/rekor/__pycache__/client_v2.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/rekor/__pycache__/client_v2.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/rekor/__pycache__/__init__.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/rekor/__pycache__/__init__.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_internal/sct.py
  • /usr/lib/python3.14/site-packages/sigstore/_internal/timestamp.py
  • /usr/lib/python3.14/site-packages/sigstore/_internal/trust.py
  • /usr/lib/python3.14/site-packages/sigstore/_internal/tuf.py
  • /usr/lib/python3.14/site-packages/sigstore/__main__.py
  • /usr/lib/python3.14/site-packages/sigstore/models.py
  • /usr/lib/python3.14/site-packages/sigstore/oidc.py
  • /usr/lib/python3.14/site-packages/sigstore/__pycache__
  • /usr/lib/python3.14/site-packages/sigstore/__pycache__/_cli.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/__pycache__/_cli.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/__pycache__/errors.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/__pycache__/errors.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/__pycache__/hashes.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/__pycache__/hashes.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/__pycache__/__init__.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/__pycache__/__init__.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/__pycache__/__main__.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/__pycache__/__main__.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/__pycache__/models.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/__pycache__/models.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/__pycache__/oidc.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/__pycache__/oidc.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/__pycache__/sign.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/__pycache__/sign.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/__pycache__/_utils.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/__pycache__/_utils.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/py.typed
  • /usr/lib/python3.14/site-packages/sigstore/sign.py
  • /usr/lib/python3.14/site-packages/sigstore/_store
  • /usr/lib/python3.14/site-packages/sigstore/_store/https%3A%2F%2Ftuf-repo-cdn.sigstage.dev
  • /usr/lib/python3.14/site-packages/sigstore/_store/https%3A%2F%2Ftuf-repo-cdn.sigstage.dev/root.json
  • /usr/lib/python3.14/site-packages/sigstore/_store/https%3A%2F%2Ftuf-repo-cdn.sigstage.dev/signing_config.v0.2.json
  • /usr/lib/python3.14/site-packages/sigstore/_store/https%3A%2F%2Ftuf-repo-cdn.sigstage.dev/trusted_root.json
  • /usr/lib/python3.14/site-packages/sigstore/_store/https%3A%2F%2Ftuf-repo-cdn.sigstore.dev
  • /usr/lib/python3.14/site-packages/sigstore/_store/https%3A%2F%2Ftuf-repo-cdn.sigstore.dev/root.json
  • /usr/lib/python3.14/site-packages/sigstore/_store/https%3A%2F%2Ftuf-repo-cdn.sigstore.dev/signing_config.v0.2.json
  • /usr/lib/python3.14/site-packages/sigstore/_store/https%3A%2F%2Ftuf-repo-cdn.sigstore.dev/trusted_root.json
  • /usr/lib/python3.14/site-packages/sigstore/_store/__init__.py
  • /usr/lib/python3.14/site-packages/sigstore/_store/__pycache__
  • /usr/lib/python3.14/site-packages/sigstore/_store/__pycache__/__init__.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_store/__pycache__/__init__.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/_utils.py
  • /usr/lib/python3.14/site-packages/sigstore/verify
  • /usr/lib/python3.14/site-packages/sigstore/verify/__init__.py
  • /usr/lib/python3.14/site-packages/sigstore/verify/policy.py
  • /usr/lib/python3.14/site-packages/sigstore/verify/__pycache__
  • /usr/lib/python3.14/site-packages/sigstore/verify/__pycache__/__init__.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/verify/__pycache__/__init__.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/verify/__pycache__/policy.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/verify/__pycache__/policy.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/verify/__pycache__/verifier.cpython-314.opt-1.pyc
  • /usr/lib/python3.14/site-packages/sigstore/verify/__pycache__/verifier.cpython-314.pyc
  • /usr/lib/python3.14/site-packages/sigstore/verify/verifier.py
  • /usr/share/doc/packages/python314-sigstore
  • /usr/share/doc/packages/python314-sigstore/README.md
  • /usr/share/libalternatives/sigstore
  • /usr/share/libalternatives/sigstore/314.conf
  • /usr/share/licenses/python314-sigstore
  • /usr/share/licenses/python314-sigstore/LICENSE

Field source: openSUSE Tumbleweed OSS

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
4.2.0-2.2tumbleweed / ossnoarchopenSUSE Tumbleweed · OSS · multi-architecture192 KiB695 KiBnoarch/python314-sigstore-4.2.0-2.2.noarch.rpm

Field source: openSUSE Tumbleweed OSS

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVESeverityVersion impact
[CVE-2026-24408]

Published:

python311-sigstore-4.2.0-1.1 on GA media

UnknownUnknown
Details (1)
  • 4.2.0-2.2 · noarch · tumbleweed

    Unknown · Fixed: 4.2.0-1.1

    Version impact unknown

    pypi · python-sigstore · opensuse · tumbleweed

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

4.2.0-2.2 / noarchObserved Sep 1, 2026sha512 48fad00f87b9…89fd0565Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 48fad00f87b9dae00b1fe6c1f996fc3cded9e9275b5365455acdad185a0e35fc88ffb7dd973b7da3bf2f2f4e7b13fd9d654b450884cead02e3412f9689fd0565

Field source: openSUSE Tumbleweed OSS

Sources

  • Authoritative source; repository metadata signature verified

    Signature evidence

    tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f

    Repository-signature verification record
    Signed-object SHA-256
    4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
    Signer fingerprint
    AD485664E901B867051AB15F35A2F86E29B700A4
    Keyring revision
    opensuse-project-signing-key.asc
    SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Result
    Recorded as verified; digest details unavailable