---
id: 1705
title: "Announcing a stable release of sigstore-python"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2023/01/13/sigstore-python/"
published_at: "2023-01-13T15:00:58Z"
tags: ["supply-chain", "open-source", "cryptography", "python", "code-signing"]
phying_url: "https://phying.com/item/1705"
lang: en
---

# Announcing a stable release of sigstore-python

## Summary

Trail of Bits announces the first stable release of sigstore-python, a Sigstore client funded by Google's Open Source Security Team. It offers a usable, reference-quality CLI and Python API that abstract the cryptographic complexity away, leaving developers with two familiar primitives: signing and verifying.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2023-01-13T15:00:58Z
- **Original:** https://blog.trailofbits.com/2023/01/13/sigstore-python/
- **Phying News:** https://phying.com/item/1705