Registry / auth-security / sigstore-models

sigstore-models

library0.0.6pypypiunverified

Pydantic based models for Sigstore's protobuf specifications. Version 0.0.6 supports Python >=3.10. The library provides Pythonic data structures for Sigstore bundles, verifiable materials, and other sigstore artifacts. Currently in early active development with frequent releases.

auth-security serialization

pip install sigstore-models

github ↗package ↗

INSTALL

IMPORT

SIG · SIGSTORE-MODELS

sigstore-models

auth-securitypythonv0.0.6

Install

3.3s avg

Import

—

Disk

26MB

Pass rate

10/ 10

Env Coverage10 / 10

glibc

3.9–3.13

musl

3.9–3.13

Install & Compatibility

Where this runs

tested against v0.0.6 · pip install

no network on importno background threads

Install × environment matrix

Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux

musl

py 3.10–3.95 runs

installs and imports cleanly · install 0.0s · import 0.000s · 28MB

glibc

py 3.10–3.95 runs

installs and imports cleanly · install 3.3s · import 0.000s · 28MB

26MB installed

● package 26MB

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

Bundle

✓ from sigstore_models import Bundle

✗ from sigstore_models import Bundle

Load and validate a Sigstore bundle from a JSON file using the Pydantic model. Requires Python >=3.10.

from sigstore_models import Bundle # Load a bundle from a file (e.g., sigstore bundle JSON) import json with open('bundle.sigstore.json') as f: data = json.load(f) bundle = Bundle.model_validate(data) print(bundle.media_type)

Debug

Known issues

breakingDrop of Python 3.9 support in v0.0.6. Upgrade to Python 3.10+ after updating.

fix

Use Python 3.10 or higher. If stuck on 3.9, pin to sigstore-models<0.0.6.

affects: >=0.0.6

gotchaThe library currently has no stable release and APIs may change without notice in minor version bumps.

fix

Pin dependencies to exact version (e.g., sigstore-models==0.0.6) in production.

affects: all

deprecatedSome model fields may be renamed as the protobuf spec evolves. Always validate with recent bundles.

fix

Use model_dump() to inspect fields after loading if you encounter validation errors.

affects: all

Upgrade

Version history

0.0.6latest on PyPI · released Nov 26, 2025

Audit

Dependencies

pydanticrequiredCore dependency for model definitions

protobufrequiredUsed for serialization/deserialization from protobuf

Agent activity

32 hits · last 30 days

node

OpenAI (training)

Resources

githubhttps://github.com/astral-sh/sigstore-models ↗

packagehttps://pypi.org/project/sigstore-models/ ↗