From e3c8dc28525abc4aef2cf23e290419dd7e7637ea Mon Sep 17 00:00:00 2001 From: Imran Siddique <45405841+imran-siddique@users.noreply.github.com> Date: Wed, 21 Oct 2026 21:02:48 -0700 Subject: [PATCH] ci(examples): install pyOpenSSL for model-signing 1.1.1 sigstore 4.5.1 dropped its pyOpenSSL dependency, and model-signing 1.1.1 imports OpenSSL without declaring it, so the weight-custody-manifest job fails at import on every pull request. Reported upstream as sigstore/model-transparency#685. Signed-off-by: Imran Siddique <45405841+imran-siddique@users.noreply.github.com> --- .github/workflows/examples-ci.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/examples-ci.yml b/.github/workflows/examples-ci.yml index 310e6f1..02c45c8 100644 --- a/.github/workflows/examples-ci.yml +++ b/.github/workflows/examples-ci.yml @@ -249,7 +249,9 @@ jobs: # from PyPI, which is what makes them a check on the release. run: | python -m pip install --require-hashes -r ../requirements/wcm-harness.txt - python -m pip install "weight-custody-manifest[model-signing]>=0.27.0" + # model-signing 1.1.1 imports OpenSSL without declaring pyOpenSSL, which + # sigstore 4.5.1 stopped pulling in (sigstore/model-transparency#685). + python -m pip install "weight-custody-manifest[model-signing]>=0.27.0" pyOpenSSL - name: Run every offline demo and the unit tests run: python run_demos.py