every wheel signed & verifiable

python⁠-⁠wheels

Prebuilt wheels for platforms upstream hasn't gotten to yet. Each one is built in CI from a pinned upstream commit and comes with a signed record of exactly what was built and where it came from — so you can check that yourself instead of taking our word for it.

Install

pip install --extra-index-url https://python-wheels.github.io/simple/ <package>

Packages

dbt-oss win_arm64
dbt-core win_arm64 · legacy name

How a wheel gets here

Built from a pinned commit.
The build workflow resolves the requested upstream git tag to an exact commit and checks it out untouched — no floating tags, no local patches.
Attested, not just uploaded.
Two Sigstore-signed attestations are generated per wheel: build provenance (this workflow built it, unmodified since) and upstream source (which exact upstream commit it came from).
Verifiable by you, offline of trust.
Before you install, or any time after, you can check both claims yourself:
```
gh attestation verify <wheel> \
  --repo patrickryankenneth/python-wheels-builds
```

Build workflow and source: python-wheels-builds.