Verify an Artifact Against Allowed Hashes
Intermediate
Write verify_artifact(data, allowed), which checks the bytes of a downloaded package file against the list of hashes a lock or requirements file allows, the core check behind pip's --require-hashes mode.
Keywords
python-packagingreproducible-environmentshashingsupply-chain
Python
Run your code to see results
No results yet
Run your code to check it against the examples, or submit to run every test.