PythonfromTall, Snarky Canadian1 month agoWhy pylock.toml includes digital attestationsUsing trusted publishing with digital attestations can enhance security for Python projects on PyPI.