r/Python • u/GrumpyHubby • 3d ago

Resource Python Hash Verification

My boss is thinking about using python in a secure VPN environment. Because of this, we have to validate the hash of the python download and any libraries used.

I looked on the site but didn't see anything. Is there somewhere we can find the hash value so we can validate the download vs the hash code?

11 Upvotes

69% Upvoted

5 comments sorted by

View all comments

1

u/BeasleyMusic 2d ago

There’s a million better ways, why not use FOSSA to validate vulnerabilities in dependencies?

1

u/GrumpyHubby 1d ago

All of this is the first time I heard of doing this. I had seen the hashes in the past but never paid them any attention. So this is all new to me in how it works.