Some tools (e.g. zizmor) package the binary so that it can be installed via other language package managers.
Allowing slsa-verifier to be installed via pip and Python packaging tools would make it much easier to install on a large number of machines since Python is very widely available. It also has the added benefit of allowing it to be installed in a Python virtualenv that is project specific.
Some tools (e.g. zizmor) package the binary so that it can be installed via other language package managers.
Allowing slsa-verifier to be installed via pip and Python packaging tools would make it much easier to install on a large number of machines since Python is very widely available. It also has the added benefit of allowing it to be installed in a Python virtualenv that is project specific.