Python Hash Verification
My boss is thinking about using python in a secure VPN environment. Because of this, we have to validate the hash of the python download and any libraries used.
I looked on the site but didn't see anything. Is there somewhere we can find the hash value so we can validate the download vs the hash code?
8 comments · 69% upvoted · other discussions
Python uses now sigstore instead of GPG.
Install sigstore: py -m pip install sigstore
Command to check:
python -m sigstore verify identity python-3.15.2-amd64.exe --certificate python-3.15.2-amd64.exe.crt --signature python-3.15.2-amd64.exe.sig --cert-identity [[email protected]](mailto:[email protected]) --cert-oidc-issuer https://github.com/login/oauth
And yes, 3.15.2 is out.
To upgrade with Python install manager: py install --upgrade