Releases: esev/pywemo
Releases · esev/pywemo
0.9.1rc19 - title
Original release body
Full Changelog: 0.9.1rc18...0.9.1rc19
Release asset details:
SHA256
checksums
bcf6ad5e5f71a902165d2d383f3f0aba87602f929a550c10cf81f79a764846ac pywemo_esev-0.9.1rc19-py3-none-any.whl
a9a8f3d4c5ab522202e277040cf76976ed31d84daf7cef41b96cff41e9584724 pywemo_esev-0.9.1rc19.tar.gz
How to verify sigstore
signatures
Visit sigstore.dev to learn more about sigstore signing and verification.
Certificate identity:
https://github.com/esev/pywemo/.github/workflows/publish.yml@refs/tags/0.9.1rc19
Verify with sigstore-python
:
# Download the release wheel and .sigstore file.
wget https://github.com/esev/pywemo/releases/download/0.9.1rc19/pywemo-0.9.1rc19-py3-none-any.whl
wget https://github.com/esev/pywemo/releases/download/0.9.1rc19/pywemo-0.9.1rc19-py3-none-any.whl.sigstore
# Install sigstore.
pip install sigstore
# Verify that the wheel was built from this release.
python -m sigstore verify github \
--bundle pywemo-0.9.1rc19-py3-none-any.whl.sigstore \
--cert-identity https://github.com/esev/pywemo/.github/workflows/publish.yml@refs/tags/0.9.1rc19 \
--sha 43a3e33cc5a86a4b0e43615bb2555abafd2c9c0e \
pywemo-0.9.1rc19-py3-none-any.whl
How to verify SLSA
provenance
Visit slsa.dev to learn more about generating and verifying software provenance with SLSA.
SLSA verifier installation instructions can be found at github.com/slsa-framework/slsa-verifier#installation.
# Download the release wheel and .intoto.jsonl file.
wget https://github.com/esev/pywemo/releases/download/0.9.1rc19/pywemo-0.9.1rc19-py3-none-any.whl
wget https://github.com/esev/pywemo/releases/download/0.9.1rc19/provenance-pywemo-0.9.1rc19.intoto.jsonl
# Verify that the wheel was built from this release.
slsa-verifier-linux-amd64 verify-artifact \
--provenance-path provenance-pywemo-0.9.1rc19.intoto.jsonl \
--source-uri github.com/esev/pywemo \
--source-tag 0.9.1rc19 \
pywemo-0.9.1rc19-py3-none-any.whl
0.9.1rc18 - title
Original release body
Full Changelog: 0.9.1rc17...0.9.1rc18
0.9.1rc17 - title
Original body
Full Changelog: 0.9.1rc16...0.9.1rc17
0.9.1rc16 - title
Original body
Full Changelog: 0.9.1rc15...0.9.1rc16
0.9.1rc15 - title
Fix sigstore output artifacts path
0.9.1rc14 - title
Move hashing to a publish step
0.9.1rc13 - title
slsa and sigstore run in parallel
0.9.1rc12 - title
Fix sigstore assets path
0.9.1rc11 - title
0.9.1rc11 version bump