PythonfromTall, Snarky Canadian3 weeks agoWhy pylock.toml includes digital attestationsUsing trusted publishing with digital attestations can enhance security for Python projects on PyPI.