pin sigstore to v3 while working on v4 migration (#534)

spencerschrock · web-flow · commit 5ac36662ebc2 · 2025-09-24T21:11:15.000Z
Signed-off-by: Spencer Schrock &lt;sschrock@google.com&gt;
diff --git a/pyproject.toml b/pyproject.toml
@@ -32,7 +32,8 @@ dependencies = [
   "click",
   "cryptography",
   "in-toto-attestation",
-  "sigstore",
+  "sigstore-protobuf-specs == 0.3.2",
+  "sigstore==3.6.5",
   "typing_extensions",
 ]
 requires-python = ">=3.9"
