Repository navigation
Releases: aesir-oss/pixi-policy
Release list
Release v0.3.0
0.3.0 - 2026-10-16
Features
- python: Enforce a standard Python version (#42) (#43) (a8bd48f)
- hygiene: The same package from conda and PyPI (#11) (#46) (9689a2f)
- licenses: Read common spellings and report ambiguous names (#7) (#47) (cdf3450)
- advisories: Apply VEX statements (#10) (#48) (7410959)
- facts: Export the facts for OPA and Rego (#9) (#49) (a4d907e)
- cache: Keep the cache under pixi's cache directory (#58) (#59) (638a7f5)
- licenses: Read PyPI licenses from the wheels' METADATA (#51) (#61) (8ed7aa8)
- freshness: Check PyPI packages (#52) (#62) (cae83b1)
- advisories: A known-exploited advisory counts as critical (#57) (#63) (468e7b0)
- python: Check requires-python against the standard (#56) (#64) (deeb54e)
- manifest: Require an exclude-newer cooldown (#55) (#65) (5dc2a2b)
- cli: Pixi policy lock, which checks the lockfile it writes (#54) (#66) (066dabb)
- init: Propose the newer tables (#53) (#67) (5acc66c)
Bug Fixes
- extends: Treat [freshness] as a table (#44) (#45) (9a1b567)
- licenses: An OR whose only allowed option is a review license is reported (#60) (#68) (4d234eb)
- cli: An error report into a closed pipe exits 2, not 101 (#70) (#71) (804f015)
- init: Propose the shortest exclude-newer cooldown in use (#72) (#73) (90ca1c1)
Documentation
- memory: Record the 0.2.0 release (#41) (69c399f)
- memory: Record the 0.3.0 work (#50) (16a62ce)
- memory: Record the 0.3.0 work before rc.1 (#69) (5ceefbf)
Release artifacts
| Artifact | Platform |
|---|---|
pixi-policy-v0.3.0-linux-64.tar.gz |
Linux x86_64 |
pixi-policy-v0.3.0-linux-aarch64.tar.gz |
Linux arm64 |
pixi-policy-v0.3.0-osx-64.tar.gz |
macOS Intel |
pixi-policy-v0.3.0-osx-arm64.tar.gz |
macOS Apple Silicon |
pixi-policy-v0.3.0-win-64.zip |
Windows x86_64 |
Each archive has a .sha256 and a signed .sigstore.json provenance bundle beside it.
The same binary is attached as Python wheels (pixi_policy-*.whl, no Python code) for Linux glibc and musl
x86_64 and aarch64, macOS x86_64 and arm64, and Windows x86_64, published to PyPI (TestPyPI for a release
candidate) as well. Where PyPI is out of reach, install one straight from this release:
pip install https://github.com/aesir-oss/pixi-policy/releases/download/v0.3.0/<wheel>.
To check an archive was built by this repository's release workflow, from this tag, on a GitHub-hosted runner:
gh attestation verify pixi-policy-v0.3.0-linux-64.tar.gz --repo aesir-oss/pixi-policy \
--signer-workflow aesir-oss/pixi-policy/.github/workflows/release-artifacts.yml \
--source-ref refs/tags/v0.3.0 \
--deny-self-hosted-runnersAdd --bundle pixi-policy-v0.3.0-linux-64.tar.gz.sigstore.json to verify without reaching GitHub.
Full changelog: CHANGELOG.md
Release v0.3.0-rc.1
0.2.0 - 2026-10-15
Features
- action: The pixi-policy GitHub Action (#4) (#33) (d210508)
- pre-commit: The pixi-policy pre-commit hook (#5) (#34) (b13fcd8)
- policy: Extend shared policies by path (#1) (#36) (6f3cd0d)
- policy: Extend pinned URLs, cached for offline use (#1) (#37) (a20fa03)
- advisories: Fail on known vulnerabilities from OSV, KEV and EPSS (#3) (#38) (04239dc)
- freshness: Build age, majors behind and archived feedstocks (#2) (#39) (be91702)
Bug Fixes
- sarif: Link the tool and each rule to aesir-oss.github.io/pixi-policy (#18) (27b5830)
- advisories: Trim advisory summaries (#40) (b71d42e)
Documentation
CI and Build
Release artifacts
| Artifact | Platform |
|---|---|
pixi-policy-v0.3.0-rc.1-linux-64.tar.gz |
Linux x86_64 |
pixi-policy-v0.3.0-rc.1-linux-aarch64.tar.gz |
Linux arm64 |
pixi-policy-v0.3.0-rc.1-osx-64.tar.gz |
macOS Intel |
pixi-policy-v0.3.0-rc.1-osx-arm64.tar.gz |
macOS Apple Silicon |
pixi-policy-v0.3.0-rc.1-win-64.zip |
Windows x86_64 |
Each archive has a .sha256 and a signed .sigstore.json provenance bundle beside it.
The same binary is attached as Python wheels (pixi_policy-*.whl, no Python code) for Linux glibc and musl
x86_64 and aarch64, macOS x86_64 and arm64, and Windows x86_64, published to PyPI (TestPyPI for a release
candidate) as well. Where PyPI is out of reach, install one straight from this release:
pip install https://github.com/aesir-oss/pixi-policy/releases/download/v0.3.0-rc.1/<wheel>.
To check an archive was built by this repository's release workflow, from this tag, on a GitHub-hosted runner:
gh attestation verify pixi-policy-v0.3.0-rc.1-linux-64.tar.gz --repo aesir-oss/pixi-policy \
--signer-workflow aesir-oss/pixi-policy/.github/workflows/release-artifacts.yml \
--source-ref refs/tags/v0.3.0-rc.1 \
--deny-self-hosted-runnersAdd --bundle pixi-policy-v0.3.0-rc.1-linux-64.tar.gz.sigstore.json to verify without reaching GitHub.
Full changelog: CHANGELOG.md
Release v0.2.0
0.2.0 - 2026-10-15
Features
- action: The pixi-policy GitHub Action (#4) (#33) (d210508)
- pre-commit: The pixi-policy pre-commit hook (#5) (#34) (b13fcd8)
- policy: Extend shared policies by path (#1) (#36) (6f3cd0d)
- policy: Extend pinned URLs, cached for offline use (#1) (#37) (a20fa03)
- advisories: Fail on known vulnerabilities from OSV, KEV and EPSS (#3) (#38) (04239dc)
- freshness: Build age, majors behind and archived feedstocks (#2) (#39) (be91702)
Bug Fixes
- sarif: Link the tool and each rule to aesir-oss.github.io/pixi-policy (#18) (27b5830)
- advisories: Trim advisory summaries (#40) (b71d42e)
Documentation
CI and Build
Release artifacts
| Artifact | Platform |
|---|---|
pixi-policy-v0.2.0-linux-64.tar.gz |
Linux x86_64 |
pixi-policy-v0.2.0-linux-aarch64.tar.gz |
Linux arm64 |
pixi-policy-v0.2.0-osx-64.tar.gz |
macOS Intel |
pixi-policy-v0.2.0-osx-arm64.tar.gz |
macOS Apple Silicon |
pixi-policy-v0.2.0-win-64.zip |
Windows x86_64 |
Each archive has a .sha256 and a signed .sigstore.json provenance bundle beside it.
The same binary is attached as Python wheels (pixi_policy-*.whl, no Python code) for Linux glibc and musl
x86_64 and aarch64, macOS x86_64 and arm64, and Windows x86_64, published to PyPI (TestPyPI for a release
candidate) as well. Where PyPI is out of reach, install one straight from this release:
pip install https://github.com/aesir-oss/pixi-policy/releases/download/v0.2.0/<wheel>.
To check an archive was built by this repository's release workflow, from this tag, on a GitHub-hosted runner:
gh attestation verify pixi-policy-v0.2.0-linux-64.tar.gz --repo aesir-oss/pixi-policy \
--signer-workflow aesir-oss/pixi-policy/.github/workflows/release-artifacts.yml \
--source-ref refs/tags/v0.2.0 \
--deny-self-hosted-runnersAdd --bundle pixi-policy-v0.2.0-linux-64.tar.gz.sigstore.json to verify without reaching GitHub.
Full changelog: CHANGELOG.md
Release v0.2.0-rc.2
0.1.1 - 2026-10-12
Refactoring
- Fold the shared modules into the crate (279c722)
Documentation
CI and Build
- Stand alone as aesir-oss/pixi-policy (82a0cbb)
Release artifacts
| Artifact | Platform |
|---|---|
pixi-policy-v0.2.0-rc.2-linux-64.tar.gz |
Linux x86_64 |
pixi-policy-v0.2.0-rc.2-linux-aarch64.tar.gz |
Linux arm64 |
pixi-policy-v0.2.0-rc.2-osx-64.tar.gz |
macOS Intel |
pixi-policy-v0.2.0-rc.2-osx-arm64.tar.gz |
macOS Apple Silicon |
pixi-policy-v0.2.0-rc.2-win-64.zip |
Windows x86_64 |
Each archive has a .sha256 and a signed .sigstore.json provenance bundle beside it.
The same binary is attached as Python wheels (pixi_policy-*.whl, no Python code) for Linux glibc and musl
x86_64 and aarch64, macOS x86_64 and arm64, and Windows x86_64, published to PyPI (TestPyPI for a release
candidate) as well. Where PyPI is out of reach, install one straight from this release:
pip install https://github.com/aesir-oss/pixi-policy/releases/download/v0.2.0-rc.2/<wheel>.
To check an archive was built by this repository's release workflow, from this tag, on a GitHub-hosted runner:
gh attestation verify pixi-policy-v0.2.0-rc.2-linux-64.tar.gz --repo aesir-oss/pixi-policy \
--signer-workflow aesir-oss/pixi-policy/.github/workflows/release-artifacts.yml \
--source-ref refs/tags/v0.2.0-rc.2 \
--deny-self-hosted-runnersAdd --bundle pixi-policy-v0.2.0-rc.2-linux-64.tar.gz.sigstore.json to verify without reaching GitHub.
Full changelog: CHANGELOG.md
Release v0.2.0-rc.1
0.1.1 - 2026-10-12
Refactoring
- Fold the shared modules into the crate (279c722)
Documentation
CI and Build
- Stand alone as aesir-oss/pixi-policy (82a0cbb)
Release artifacts
| Artifact | Platform |
|---|---|
pixi-policy-v0.2.0-rc.1-linux-64.tar.gz |
Linux x86_64 |
pixi-policy-v0.2.0-rc.1-linux-aarch64.tar.gz |
Linux arm64 |
pixi-policy-v0.2.0-rc.1-osx-64.tar.gz |
macOS Intel |
pixi-policy-v0.2.0-rc.1-osx-arm64.tar.gz |
macOS Apple Silicon |
pixi-policy-v0.2.0-rc.1-win-64.zip |
Windows x86_64 |
Each archive has a .sha256 and a signed .sigstore.json provenance bundle beside it.
The same binary is attached as Python wheels (pixi_policy-*.whl, no Python code) for Linux glibc and musl
x86_64 and aarch64, macOS x86_64 and arm64, and Windows x86_64, published to PyPI (TestPyPI for a release
candidate) as well. Where PyPI is out of reach, install one straight from this release:
pip install https://github.com/aesir-oss/pixi-policy/releases/download/v0.2.0-rc.1/<wheel>.
To check an archive was built by this repository's release workflow, from this tag, on a GitHub-hosted runner:
gh attestation verify pixi-policy-v0.2.0-rc.1-linux-64.tar.gz --repo aesir-oss/pixi-policy \
--signer-workflow aesir-oss/pixi-policy/.github/workflows/release-artifacts.yml \
--source-ref refs/tags/v0.2.0-rc.1 \
--deny-self-hosted-runnersAdd --bundle pixi-policy-v0.2.0-rc.1-linux-64.tar.gz.sigstore.json to verify without reaching GitHub.
Full changelog: CHANGELOG.md
Release v0.1.1
0.1.1 - 2026-10-12
Refactoring
- Fold the shared modules into the crate (279c722)
Documentation
CI and Build
- Stand alone as aesir-oss/pixi-policy (82a0cbb)
Release artifacts
| Artifact | Platform |
|---|---|
pixi-policy-v0.1.1-linux-64.tar.gz |
Linux x86_64 |
pixi-policy-v0.1.1-linux-aarch64.tar.gz |
Linux arm64 |
pixi-policy-v0.1.1-osx-64.tar.gz |
macOS Intel |
pixi-policy-v0.1.1-osx-arm64.tar.gz |
macOS Apple Silicon |
pixi-policy-v0.1.1-win-64.zip |
Windows x86_64 |
Each archive has a .sha256 and a signed .sigstore.json provenance bundle beside it.
The same binary is attached as Python wheels (pixi_policy-*.whl, no Python code) for Linux glibc and musl
x86_64 and aarch64, macOS x86_64 and arm64, and Windows x86_64, published to PyPI (TestPyPI for a release
candidate) as well. Where PyPI is out of reach, install one straight from this release:
pip install https://github.com/aesir-oss/pixi-policy/releases/download/v0.1.1/<wheel>.
To check an archive was built by this repository's release workflow, from this tag, on a GitHub-hosted runner:
gh attestation verify pixi-policy-v0.1.1-linux-64.tar.gz --repo aesir-oss/pixi-policy \
--signer-workflow aesir-oss/pixi-policy/.github/workflows/release-artifacts.yml \
--source-ref refs/tags/v0.1.1 \
--deny-self-hosted-runnersAdd --bundle pixi-policy-v0.1.1-linux-64.tar.gz.sigstore.json to verify without reaching GitHub.
Full changelog: CHANGELOG.md
Release v0.1.1-rc.1
0.1.0 - 2026-10-12
Features
- common: Create the shared crate with license normalization and terminal output (#56) (#102) (7de1f0c)
- common: One license verdict for pixi-sbom's gate and pixi-policy's rule (#59) (#103) (fa9527b)
- policy: Scaffold pixi-policy with the check command and the policy file (#60) (#110) (2efc424)
- policy: Text, JSON and SARIF output (#67) (#111) (5714259)
- policy: Sources rules, where packages may come from (#61) (#112) (db6fcf8)
- policy: Bans rule, packages and versions that are never allowed (#62) (#113) (be9451d)
- policy: Licenses rules, allow, review and deny lists of SPDX licenses (#63) (#114) (de9b5f9)
- policy: Waivers that expire (#66) (#115) (3ce66e3)
- policy: Manifest hygiene rules (#64) (#116) (f541d69)
- policy: Lock hygiene rules (#65) (#117) (8ed53c6)
- policy: Pixi policy init and pixi policy explain (#68) (#119) (5a9354b)
- docs: One docs site with a section per extension (#6) (#126) (e0cec80)
- policy: The policy key reference, in explain and the docs (#70) (#129) (5415e70)
Bug Fixes
- policy: Name the policy file as given in waiver findings' locations (#121) (#123) (70a6451)
- policy: Say why a ban's version range is invalid in one line (#122) (#124) (6da1266)
Refactoring
CI and Build
- release: Stop publishing to crates.io, and name the shared crate pixi-ext-common (#106) (#107) (c1b791e)
- release: Release pixi-policy through the shared release workflows (#69) (#120) (520d0c2)
Release artifacts
| Artifact | Platform |
|---|---|
pixi-policy-v0.1.1-rc.1-linux-64.tar.gz |
Linux x86_64 |
pixi-policy-v0.1.1-rc.1-linux-aarch64.tar.gz |
Linux arm64 |
pixi-policy-v0.1.1-rc.1-osx-64.tar.gz |
macOS Intel |
pixi-policy-v0.1.1-rc.1-osx-arm64.tar.gz |
macOS Apple Silicon |
pixi-policy-v0.1.1-rc.1-win-64.zip |
Windows x86_64 |
Each archive has a .sha256 and a signed .sigstore.json provenance bundle beside it.
The same binary is attached as Python wheels (pixi_policy-*.whl, no Python code) for Linux glibc and musl
x86_64 and aarch64, macOS x86_64 and arm64, and Windows x86_64, published to PyPI (TestPyPI for a release
candidate) as well. Where PyPI is out of reach, install one straight from this release:
pip install https://github.com/aesir-oss/pixi-policy/releases/download/v0.1.1-rc.1/<wheel>.
To check an archive was built by this repository's release workflow, from this tag, on a GitHub-hosted runner:
gh attestation verify pixi-policy-v0.1.1-rc.1-linux-64.tar.gz --repo aesir-oss/pixi-policy \
--signer-workflow aesir-oss/pixi-policy/.github/workflows/release-artifacts.yml \
--source-ref refs/tags/v0.1.1-rc.1 \
--deny-self-hosted-runnersAdd --bundle pixi-policy-v0.1.1-rc.1-linux-64.tar.gz.sigstore.json to verify without reaching GitHub.
Full changelog: CHANGELOG.md
Release v0.1.0
0.1.0 - 2026-10-12
Features
- policy: Scaffold pixi-policy with the check command and the policy file (#60) (#110) (cab87c4)
- policy: Text, JSON and SARIF output (#67) (#111) (1956ce4)
- policy: Sources rules, where packages may come from (#61) (#112) (32a619f)
- policy: Bans rule, packages and versions that are never allowed (#62) (#113) (b6f7292)
- policy: Licenses rules, allow, review and deny lists of SPDX licenses (#63) (#114) (0ff1eb6)
- policy: Waivers that expire (#66) (#115) (fb40d7c)
- policy: Manifest hygiene rules (#64) (#116) (9f99553)
- policy: Lock hygiene rules (#65) (#117) (da835fd)
- policy: Pixi policy init and pixi policy explain (#68) (#119) (e62a1c7)
- docs: One docs site with a section per extension (#6) (#126) (b57f9a4)
- policy: The policy key reference, in explain and the docs (#70) (#129) (f65e5ee)
Bug Fixes
- policy: Name the policy file as given in waiver findings' locations (#121) (#123) (b1ff5c1)
- policy: Say why a ban's version range is invalid in one line (#122) (#124) (e0a232e)
CI and Build
- release: Stop publishing to crates.io, and name the shared crate pixi-ext-common (#106) (#107) (b609721)
- release: Release pixi-policy through the shared release workflows (#69) (#120) (070ffbe)
Release artifacts
| Artifact | Platform |
|---|---|
pixi-policy-v0.1.0-linux-64.tar.gz |
Linux x86_64 |
pixi-policy-v0.1.0-linux-aarch64.tar.gz |
Linux arm64 |
pixi-policy-v0.1.0-osx-64.tar.gz |
macOS Intel |
pixi-policy-v0.1.0-osx-arm64.tar.gz |
macOS Apple Silicon |
pixi-policy-v0.1.0-win-64.zip |
Windows x86_64 |
Each archive has a .sha256 and a signed .sigstore.json provenance bundle beside it.
The same binary is attached as Python wheels (pixi_policy-*.whl, no Python code) for Linux glibc and musl
x86_64 and aarch64, macOS x86_64 and arm64, and Windows x86_64, published to PyPI (TestPyPI for a release
candidate) as well. Where PyPI is out of reach, install one straight from this release:
pip install https://github.com/aesir-oss/pixi-ext-contrib/releases/download/pixi-policy-v0.1.0/<wheel>.
To check an archive was built by this repository's release workflow, from this tag, on a GitHub-hosted runner:
gh attestation verify pixi-policy-v0.1.0-linux-64.tar.gz --repo aesir-oss/pixi-ext-contrib \
--signer-workflow aesir-oss/pixi-ext-contrib/.github/workflows/release-artifacts.yml \
--source-ref refs/tags/pixi-policy-v0.1.0 \
--deny-self-hosted-runnersAdd --bundle pixi-policy-v0.1.0-linux-64.tar.gz.sigstore.json to verify without reaching GitHub.
Full changelog: CHANGELOG.md
First published 2026-10-12 at https://github.com/aesir-oss/pixi-ext-contrib/releases/tag/pixi-policy-v0.1.0; copied here when pixi-policy moved to aesir-oss/pixi-policy.
Release v0.1.0-rc.3
0.1.0-rc.3 - 2026-10-12
Features
- policy: Scaffold pixi-policy with the check command and the policy file (#60) (#110) (cab87c4)
- policy: Text, JSON and SARIF output (#67) (#111) (1956ce4)
- policy: Sources rules, where packages may come from (#61) (#112) (32a619f)
- policy: Bans rule, packages and versions that are never allowed (#62) (#113) (b6f7292)
- policy: Licenses rules, allow, review and deny lists of SPDX licenses (#63) (#114) (0ff1eb6)
- policy: Waivers that expire (#66) (#115) (fb40d7c)
- policy: Manifest hygiene rules (#64) (#116) (9f99553)
- policy: Lock hygiene rules (#65) (#117) (da835fd)
- policy: Pixi policy init and pixi policy explain (#68) (#119) (e62a1c7)
- docs: One docs site with a section per extension (#6) (#126) (b57f9a4)
- policy: The policy key reference, in explain and the docs (#70) (#129) (f65e5ee)
Bug Fixes
- policy: Name the policy file as given in waiver findings' locations (#121) (#123) (b1ff5c1)
- policy: Say why a ban's version range is invalid in one line (#122) (#124) (e0a232e)
CI and Build
- release: Stop publishing to crates.io, and name the shared crate pixi-ext-common (#106) (#107) (b609721)
- release: Release pixi-policy through the shared release workflows (#69) (#120) (070ffbe)
Release artifacts
| Artifact | Platform |
|---|---|
pixi-policy-v0.1.0-rc.3-linux-64.tar.gz |
Linux x86_64 |
pixi-policy-v0.1.0-rc.3-linux-aarch64.tar.gz |
Linux arm64 |
pixi-policy-v0.1.0-rc.3-osx-64.tar.gz |
macOS Intel |
pixi-policy-v0.1.0-rc.3-osx-arm64.tar.gz |
macOS Apple Silicon |
pixi-policy-v0.1.0-rc.3-win-64.zip |
Windows x86_64 |
Each archive has a .sha256 and a signed .sigstore.json provenance bundle beside it.
The same binary is attached as Python wheels (pixi_policy-*.whl, no Python code) for Linux glibc and musl
x86_64 and aarch64, macOS x86_64 and arm64, and Windows x86_64, published to PyPI (TestPyPI for a release
candidate) as well. Where PyPI is out of reach, install one straight from this release:
pip install https://github.com/aesir-oss/pixi-ext-contrib/releases/download/pixi-policy-v0.1.0-rc.3/<wheel>.
To check an archive was built by this repository's release workflow, from this tag, on a GitHub-hosted runner:
gh attestation verify pixi-policy-v0.1.0-rc.3-linux-64.tar.gz --repo aesir-oss/pixi-ext-contrib \
--signer-workflow aesir-oss/pixi-ext-contrib/.github/workflows/release-artifacts.yml \
--source-ref refs/tags/pixi-policy-v0.1.0-rc.3 \
--deny-self-hosted-runnersAdd --bundle pixi-policy-v0.1.0-rc.3-linux-64.tar.gz.sigstore.json to verify without reaching GitHub.
Full changelog: CHANGELOG.md
First published 2026-10-12 at https://github.com/aesir-oss/pixi-ext-contrib/releases/tag/pixi-policy-v0.1.0-rc.3; copied here when pixi-policy moved to aesir-oss/pixi-policy.
Release v0.1.0-rc.2
0.1.0-rc.2 - 2026-10-12
Features
- policy: Scaffold pixi-policy with the check command and the policy file (#60) (#110) (cab87c4)
- policy: Text, JSON and SARIF output (#67) (#111) (1956ce4)
- policy: Sources rules, where packages may come from (#61) (#112) (32a619f)
- policy: Bans rule, packages and versions that are never allowed (#62) (#113) (b6f7292)
- policy: Licenses rules, allow, review and deny lists of SPDX licenses (#63) (#114) (0ff1eb6)
- policy: Waivers that expire (#66) (#115) (fb40d7c)
- policy: Manifest hygiene rules (#64) (#116) (9f99553)
- policy: Lock hygiene rules (#65) (#117) (da835fd)
- policy: Pixi policy init and pixi policy explain (#68) (#119) (e62a1c7)
Bug Fixes
- policy: Name the policy file as given in waiver findings' locations (#121) (#123) (b1ff5c1)
- policy: Say why a ban's version range is invalid in one line (#122) (#124) (e0a232e)
CI and Build
- release: Stop publishing to crates.io, and name the shared crate pixi-ext-common (#106) (#107) (b609721)
- release: Release pixi-policy through the shared release workflows (#69) (#120) (070ffbe)
Release artifacts
| Artifact | Platform |
|---|---|
pixi-policy-v0.1.0-rc.2-linux-64.tar.gz |
Linux x86_64 |
pixi-policy-v0.1.0-rc.2-linux-aarch64.tar.gz |
Linux arm64 |
pixi-policy-v0.1.0-rc.2-osx-64.tar.gz |
macOS Intel |
pixi-policy-v0.1.0-rc.2-osx-arm64.tar.gz |
macOS Apple Silicon |
pixi-policy-v0.1.0-rc.2-win-64.zip |
Windows x86_64 |
Each archive has a .sha256 and a signed .sigstore.json provenance bundle beside it.
The same binary is attached as Python wheels (pixi_policy-*.whl, no Python code) for Linux glibc and musl
x86_64 and aarch64, macOS x86_64 and arm64, and Windows x86_64, published to PyPI (TestPyPI for a release
candidate) as well. Where PyPI is out of reach, install one straight from this release:
pip install https://github.com/aesir-oss/pixi-ext-contrib/releases/download/pixi-policy-v0.1.0-rc.2/<wheel>.
To check an archive was built by this repository's release workflow, from this tag, on a GitHub-hosted runner:
gh attestation verify pixi-policy-v0.1.0-rc.2-linux-64.tar.gz --repo aesir-oss/pixi-ext-contrib \
--signer-workflow aesir-oss/pixi-ext-contrib/.github/workflows/release-artifacts.yml \
--source-ref refs/tags/pixi-policy-v0.1.0-rc.2 \
--deny-self-hosted-runnersAdd --bundle pixi-policy-v0.1.0-rc.2-linux-64.tar.gz.sigstore.json to verify without reaching GitHub.
Full changelog: CHANGELOG.md
First published 2026-10-12 at https://github.com/aesir-oss/pixi-ext-contrib/releases/tag/pixi-policy-v0.1.0-rc.2; copied here when pixi-policy moved to aesir-oss/pixi-policy.