Skip to content

Conversation

woodruffw
Copy link
Contributor

This fixes an error introduced with #124 -- that PR correctly dropped our "ultranormalization" of distribution names, but it didn't account for the fact that we were comparing distribution names as strings, rather than as parsed forms.

See pypa/gh-action-pypi-publish#365 for more context.

This fixes an error introduced with #124 -- that PR correctly
dropped our "ultranormalization" of distribution names, but
it didn't account for the fact that we were comparing
distribution names as strings, rather than as parsed
forms.

See pypa/gh-action-pypi-publish#365
for more context.

Signed-off-by: William Woodruff <[email protected]>
@woodruffw woodruffw requested a review from facutuesca June 3, 2025 02:23
@woodruffw woodruffw self-assigned this Jun 3, 2025
@woodruffw woodruffw added the bug 🐛 Something isn't working label Jun 3, 2025
Signed-off-by: William Woodruff <[email protected]>
def test_verify_different_wheel_tag_order(self) -> None:
attestation_path = (
_ASSETS
/ "spt3g-1.0-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.publish.attestation" # noqa: E501
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

NB: This isn't the actual attestation from this package; I've re-signed the artifact with my own identity from the Sigstore staging instance for this test.

@facutuesca facutuesca merged commit 9464aa3 into main Jun 3, 2025
8 checks passed
@facutuesca facutuesca deleted the ww/fix-dist-comparison branch June 3, 2025 06:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug 🐛 Something isn't working
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants