Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/10/30 8:24 p.m.•5 views

pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI

Summary The pypi-publish actionpypi-publish versions before 1.14.2 used to bundle the emSign root CA trust store certificate through the certifi distribution. It has since been removed through the bundle and the new version no longer includes them. pypi-publish:...

5.8AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder