1 # Maintainer: Santiago Torres-Arias <santiago@archlinux.org>
6 pkgdesc="A framework to secure your software supply chain"
9 url="https://in-toto.io"
10 depends=('python-cryptography'
11 'python-securesystemslib>=0.12.0'
17 optdepends=("gnupg: pgp signing/verification")
18 makedepends=('python' 'python-setuptools' 'git')
19 checkdepends=('python-mock')
20 source=("git+https://github.com/${pkgname}/${pkgname}.git?signed#tag=v${pkgver}")
23 #'08f71105fadba06c95d847199e28167b409208317f2866e20b8ecb5b193f490b')
25 validpgpkeys=("903BAB73640EB6D65533EFF3468F122CE8162295"
26 # Santiago Torres-Arias (upstream co-maintainer)
27 "8BA69B87D43BE294F23E812089A2AD3C07D962E8"
28 # Lukas Puehringher (upstream maintainer)
29 "E32941299CB8C0D93DCF27ACB83110D012545604"
30 # Aditya Saky (Upstream maintainer)
34 cd "${srcdir}/${pkgname}"
35 #patch -Np1 -i "${srcdir}/py310.patch"
39 cd "${srcdir}/${pkgname}"
45 cd "${srcdir}/${pkgname}"
46 python setup.py install --root="$pkgdir" --optimize=1
47 install -D -m644 -t "${pkgdir}/usr/share/licenses/${pkgname}" LICENSE
51 cd "${srcdir}/${pkgname}"
52 python tests/runtests.py