search

trailofbits / pypi-attestations

A library to convert between Sigstore Bundles and PEP 740 Attestation objects
https://trailofbits.github.io/pypi-attestations
Apache License 2.0
1 stars 1 forks source link

Consider switching `Publisher` to be a `RootModel` #44

Open woodruffw opened 1 month ago

woodruffw commented 1 month ago

I initially proposed this in https://github.com/trailofbits/pypi-attestations/pull/43, but it's somewhat disruptive/requires access through a .root attribute, which is annoying.