Pin sigstore-python to released version

trailofbits · May 2, 2024 · 3eefb9e · 3eefb9e
1 parent abd962e
commit 3eefb9e
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/pyproject.toml b/pyproject.toml
@@ -15,8 +15,7 @@ classifiers = [
     "Programming Language :: Python :: 3",
     "License :: OSI Approved :: Apache Software License",
 ]
-# TODO pin sigstore since we deppend on Bundle._inner, which is an object from the protobuf models and could change
-dependencies = ["cryptography", "pydantic", "sigstore @ git+https://github.com/sigstore/sigstore-python.git@7583a787ab808d3780e1fcdae86b8420fde939b8"]
+dependencies = ["cryptography", "pydantic", "sigstore==3.0.0rc1"]
 requires-python = ">=3.9"
 
 [project.optional-dependencies]