You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Fixed
Verification now compares the distribution filenames of artifacts
and attestations by parsing them first and comparing its components
(i.e. normalized name, version, tags) instead of doing a filename
string comparison. This fixes an issue where verification would fail
due to the artifact filename having the wheel tags in a different
order than the ones in the attestation.
(#127)