Skip to content

Commit

Permalink
Add note about use of trusted publishing; remove Verification section.
Browse files Browse the repository at this point in the history
  • Loading branch information
declaresub committed Dec 25, 2024
1 parent 63dbf82 commit 31913c6
Showing 1 changed file with 2 additions and 17 deletions.
19 changes: 2 additions & 17 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,28 +21,13 @@ ABNF is tested with Python 3.9-13.

## Installation

The abnf package is available from [PyPI](https://pypi.org/project/abnf/).
The abnf package is available from [PyPI](https://pypi.org/project/abnf/). As of version 2.3.1, abnf uses
trusted publishing.

Install it in the usual way.

pip install abnf

### Verification

The abnf package is signed with GPG. The public key is available from [github](https://github.com/declaresub.gpg),
or [OpenPGP](https://keys.openpgp.org/). The key fingerprint is `3A27 290F D243 BD83 BC3F  5BC8 86C0 57F9 6A41 A77B`.


Once you have imported the public key into GPG, you can check the signature by downloading
the files and the signature files from [PyPI](https://pypi.org/project/abnf/). No
download links for the signature files are present; you need to create them by appending `.asc`
to the package URLs.

Once downloaded, use gpg to verify the signatures.

gpg --verify abnf-1.0.0.tar.gz.asc abnf-1.0.0.tar.gz
gpg --verify abnf-1.0.0-py2.py3-none-any.whl.asc abnf-1.0.0-py2.py3-none-any.whl


## Usage

Expand Down

0 comments on commit 31913c6

Please sign in to comment.