Skip to content

library not working anymore due to sigstore 4.0.0 being used and missing sigstore_protobuf_spec #531

@stefanberger

Description

@stefanberger

Description

The sigstore package was updated to v4.0.0 a few days ago and does not pull the sigstore_protobuf_spec in anymore, which we are missing now and this leads to these kind of backtraces:

$ model_signing
Traceback (most recent call last):
  File "/home/stefanb/.local/bin/model_signing", line 5, in <module>
    from model_signing._cli import main
  File "/home/stefanb/.local/lib/python3.13/site-packages/model_signing/__init__.py", line 124, in <module>
    from model_signing import signing
  File "/home/stefanb/.local/lib/python3.13/site-packages/model_signing/signing.py", line 51, in <module>
    from model_signing._signing import sign_certificate as certificate
  File "/home/stefanb/.local/lib/python3.13/site-packages/model_signing/_signing/sign_certificate.py", line 29, in <module>
    from sigstore_protobuf_specs.dev.sigstore.bundle import v1 as bundle_pb
ModuleNotFoundError: No module named 'sigstore_protobuf_specs'

Version

model-signing==v1.0.1

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions