Skip to content

runtime/python

Python runtime policy: package registries and common API hosts a Python workload needs.

Reference Kind Latest Architecture Size Publisher
runtime/python policy 1.0.0 — — tinylabscom/mvm-packs (official)
Terminal window
mvmctl pull runtime/python
mvmctl pull runtime/python@1.0.0

This pack is a policy and is not runnable: it has no kernel, root filesystem or entrypoint.

Version Manifest SHA-256 Revoked
1.0.0 80903c11a95708dcf493d673bf76a99f3828a41a4e640550e19b76fd8affa229 yes

Included groups name other policies; they do not describe every effective permission.

Declaration Value
Direct network allow pypi.org:443
Direct network allow files.pythonhosted.org:443
Direct network allow github.com:443
Direct network allow api.github.com:443
Direct network allow objects.githubusercontent.com:443

Binding names and allowed hosts only; a binding is not proof that a secret is required, and no secret values are stored here.

Binding Allowed hosts
None declared —

Each manifest is signed keyless; manifest.sigstore.json binds it to a workflow identity (issuer https://token.actions.githubusercontent.com). Identities each version can be verified under:

  • 1.0.0: https://github.com/tinylabscom/mvm-packs/.github/workflows/publish.yml@refs/heads/main