@@ -364,32 +364,6 @@ def has_sigstore_signature(filename: str) -> bool:
364364 os .path .exists (filename + ".sig" ) and os .path .exists (filename + ".crt" )
365365 )
366366
367- # Ensure that Sigstore CLI installed on the download server is
368- # at least v3.0.0 or later to ensure valid Sigstore bundles are generated.
369- try :
370- sigstore_version_stdout = subprocess .check_output (
371- ["python3" , "-m" , "sigstore" , "--version" ]
372- )
373- sigstore_version_match = re .search (
374- r"([0-9][0-9.]*[0-9])" , sigstore_version_stdout .decode ()
375- )
376- if not sigstore_version_match :
377- error (
378- f"Couldn't determine version of Sigstore CLI: "
379- f"{ sigstore_version_stdout .decode ()} "
380- )
381- sigstore_version = sigstore_version_match .group (1 )
382- sigstore_major_version = int (sigstore_version .partition ("." )[0 ])
383- if sigstore_major_version < 3 :
384- error (
385- f"Sigstore v3 or later must be installed "
386- f"(currently { sigstore_version } ), "
387- f"run: python -m pip install -r requirements.txt"
388- )
389- except subprocess .CalledProcessError :
390- error ("Couldn't determine version of Sigstore CLI" )
391- print (f"Sigstore CLI installed is version v{ sigstore_version } " )
392-
393367 # Skip files that already have a signature (likely source distributions)
394368 unsigned_files = [
395369 filename for filename in filenames if not has_sigstore_signature (filename )
0 commit comments