runtime/python
Python runtime policy: package registries and common API hosts a Python workload needs.
| Reference | Kind | Latest | Architecture | Size | Publisher |
|---|---|---|---|---|---|
runtime/python |
policy | 1.0.0 |
— | — | tinylabscom/mvm-packs (official) |
mvmctl pull runtime/pythonmvmctl pull runtime/python@1.0.0This pack is a policy and is not runnable: it has no kernel, root filesystem or entrypoint.
Versions
Section titled “Versions”| Version | Manifest SHA-256 | Revoked |
|---|---|---|
1.0.0 |
80903c11a95708dcf493d673bf76a99f3828a41a4e640550e19b76fd8affa229 |
yes |
Policy declarations (1.0.0)
Section titled “Policy declarations (1.0.0)”Included groups name other policies; they do not describe every effective permission.
| Declaration | Value |
|---|---|
| Direct network allow | pypi.org:443 |
| Direct network allow | files.pythonhosted.org:443 |
| Direct network allow | github.com:443 |
| Direct network allow | api.github.com:443 |
| Direct network allow | objects.githubusercontent.com:443 |
Secret bindings
Section titled “Secret bindings”Binding names and allowed hosts only; a binding is not proof that a secret is required, and no secret values are stored here.
| Binding | Allowed hosts |
|---|---|
| None declared | — |
Publisher
Section titled “Publisher”Each manifest is signed keyless; manifest.sigstore.json binds it to a workflow identity (issuer https://token.actions.githubusercontent.com). Identities each version can be verified under:
1.0.0:https://github.com/tinylabscom/mvm-packs/.github/workflows/publish.yml@refs/heads/main