Skip to content

Comments

Add sigstore (for Python)#32321

Open
travishathaway wants to merge 5 commits intoconda-forge:mainfrom
travishathaway:add-python-sigstore
Open

Add sigstore (for Python)#32321
travishathaway wants to merge 5 commits intoconda-forge:mainfrom
travishathaway:add-python-sigstore

Conversation

@travishathaway
Copy link
Contributor

Checklist

  • Title of this PR is meaningful: e.g. "Adding my_nifty_package.", not "updated meta.yaml".
  • License file is packaged (see here for an example).
  • Source is from official source.
  • Package does not vendor other packages. (If a package uses the source of another package, they should be separate packages or the licenses of all packages need to be packaged).
  • If static libraries are linked in, the license of the static library is packaged.
  • Package does not ship static libraries. If static libraries are needed, follow CFEP-18.
  • Build number is 0.
  • A tarball (url) rather than a repo (e.g. git_url) is used in your recipe (see here for more details).
  • GitHub users listed in the maintainer section have posted a comment confirming they are willing to be listed there.
  • When in trouble, please check our knowledge base documentation before pinging a team.

This pull request adds five new recipes that are all necessary in order to use the sigstore library in Python.

@conda-forge-admin
Copy link
Contributor

conda-forge-admin commented Feb 24, 2026

Hi! This is the friendly automated conda-forge-linting service.

I wanted to let you know that I linted all conda-recipes in your PR (recipes/sigstore/recipe.yaml, recipes/rfc8785/recipe.yaml, recipes/sigstore-rekor-types/recipe.yaml, recipes/rfc3161-client/recipe.yaml, recipes/tuf/recipe.yaml, recipes/sigstore-models/recipe.yaml) and found some lint.

Here's what I've got...

For recipes/sigstore/recipe.yaml:

  • noarch packages can't have selectors. If the selectors are necessary, please remove noarch: python.

For recipes/rfc3161-client/recipe.yaml:

  • ❌ The summary item is expected in the about section.
  • ❌ Non noarch packages should have python requirement without any version constraints.

For recipes/rfc3161-client/recipe.yaml:

  • ℹ️ Jinja2 variable references are suggested to take a ${{<one space><variable name><one space>}} form. See lines [35].

For recipes/sigstore-models/recipe.yaml:

  • ℹ️ noarch: python recipes should usually follow the syntax in our documentation for specifying the Python version.
    • For the host section of the recipe, you should usually use the pin python ${{ python_min }}.* for the python entry.
    • If the package requires a newer Python version than the currently supported minimum version on conda-forge, you can override the python_min variable by adding a Jinja2 set statement at the top of your recipe (or using an equivalent context variable for v1 recipes).

This message was generated by GitHub Actions workflow run https://github.com/conda-forge/conda-forge-webservices/actions/runs/22361335874. Examine the logs at this URL for more detail.

@github-actions
Copy link
Contributor

Hi! This is the staged-recipes linter and your PR looks excellent! 🚀

@conda-forge-admin
Copy link
Contributor

conda-forge-admin commented Feb 24, 2026

Hi! This is the friendly automated conda-forge-linting service.

I just wanted to let you know that I linted all conda-recipes in your PR (recipes/rfc8785/recipe.yaml, recipes/sigstore-models/recipe.yaml, recipes/sigstore/recipe.yaml, recipes/rfc3161-client/recipe.yaml, recipes/sigstore-rekor-types/recipe.yaml, recipes/tuf/recipe.yaml) and found it was in an excellent condition.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants