Signing and verification tools for conda
78.24 KB
built 2026-10-17 08:12:19 GMT
Description
Based on The Update Framework (TUF), conda-content-trust is intended to ensure
that when users in the conda ecosystem obtain a package or data about that
package, they can know whether or not it is trustworthy (e.g. originally comes
from a reliable source and has not been tampered with). A basic library and
basic CLI are included to provide signing, verification, and trust delegation
functionality.
This exists as an alteration of TUF because of the very particular needs of
the conda ecosystem. (Developers are encouraged to just use TUF whenever
possible!)
This tool is general purpose. It is currently used in conda 4.10.1+ to verify
package metadata signatures when they are available.
Dependencies
14 totalRequires8
- /usr/bin/python3
- python(abi) = 3.15
- python3.15dist(cryptography) >= 41
- rpmlib(CompressedFileNames) <= 3.0.4-1
- rpmlib(FileDigests) <= 4.6.0-1
- rpmlib(PartialHardlinkSets) <= 4.0.4-1
- rpmlib(PayloadFilesHavePrefix) <= 4.0-1
- rpmlib(PayloadIsZstd) <= 5.4.18-1
Provides5
- python-conda-content-trust = 0.3.2-3.fc45
- python3-conda-content-trust = 0.3.2-3.fc45
- python3.15-conda-content-trust = 0.3.2-3.fc45
- python3.15dist(conda-content-trust) = 0.3.2
- python3dist(conda-content-trust) = 0.3.2
ObsoletesNo Obsoletes
ConflictsNo Conflicts
Recommends1
- gnupg2
SuggestsNo Suggests
SupplementsNo Supplements
EnhancesNo Enhances
Files
49
Files 1–49 of 49
Component of
buildroots that installed this RPMNo Buildroots
