`pypi-attestations convert` should also be able to convert attestations to Sigstore bundles
Opened this issue · 0 comments
facutuesca commented
LGTM! I think one follow-up here would be to do the flipside as well -- `pypi-attestations convert` should also be able to do attestations to Sigstore bundles e.g. by sniffing the input and output suffixes.
Originally posted by @woodruffw in #105 (review)