ansible-sign
Ansible content validation library and CLI
Decision gist · record as of 2026-08-14
Yes, if you need to sign or verify Ansible content. The package is actively maintained, has no known vulnerabilities, installs cleanly, and is licensed permissively under MIT. The CLI is stable; be aware the library API is not officially supported and may change. Suitable for production use in verification workflows.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires Python 3.11 or later; GPG must be installed on the system for signature operations to work.
- Low install friction with just two runtime dependencies (distlib and python-gnupg).
- Active maintenance with a release 45 days ago and recent commits; marked Production/Stable.
License · maintenance · safety
MIT (permissive) — MIT license permits commercial and private use with minimal restrictions; you may use, modify, and distribute this package freely provided you retain the license notice.
last release 2026-06-30 (45 days) · last repo commit 2026-08-11 · 16 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 412,059 downloads/mo, #6,852 on PyPI
Alternatives
Verify before relying
pip install ansible-sign
from ansible_sign.cli import main
# or use the CLI directly: ansible-sign --help- Whether the library API is production-ready despite the documentation's note that it is not officially supported and may change.
- Specific performance characteristics when handling large Ansible content collections or manifests.
What it is and what it does
ansible-sign is a library and command-line tool for cryptographically verifying Ansible content. It generates SHA256 checksums and GPG detached signatures to ensure that Ansible playbooks, roles, and other artifacts have not been tampered with and come from a trusted source. The package provides both a Python API for programmatic use and stable CLI commands for manual verification workflows.
The tool is intended for developers, system administrators, and information technology professionals who need to validate the integrity and authenticity of Ansible content in their environments. It depends on distlib for distribution utilities and python-gnupg to handle GPG operations. The CLI interface is considered stable within major versions, though the underlying library API may evolve.
Use it for
- Verify that downloaded Ansible roles or collections have not been modified or compromised before deployment.
- Generate signed manifests for Ansible content you publish to ensure end users can authenticate your releases.
- Integrate content verification into CI/CD pipelines to block deployment of unsigned or tampered Ansible artifacts.
- Validate checksum integrity of Ansible playbooks distributed across teams or organizations.
- Establish a chain of trust for Ansible automation by cryptographically signing and verifying all content.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes, if you need to sign or verify Ansible content.
The package is actively maintained, has no known vulnerabilities, installs cleanly, and is licensed permissively under MIT. The CLI is stable; be aware the library API is not officially supported and may change. Suitable for production use in verification workflows.
Install
ansible-sign on PyPI
Before you install
Low install friction with just two runtime dependencies (distlib and python-gnupg). Active maintenance with a release 45 days ago and recent commits; marked Production/Stable.
Requires Python 3.11 or later; GPG must be installed on the system for signature operations to work.
License in practice
MIT license permits commercial and private use with minimal restrictions; you may use, modify, and distribute this package freely provided you retain the license notice.
Quickstart
pip install ansible-sign
from ansible_sign.cli import main
# or use the CLI directly: ansible-sign --helpVerify before relying
- Whether the library API is production-ready despite the documentation's note that it is not officially supported and may change.
- Specific performance characteristics when handling large Ansible content collections or manifests.
Package facts
| License | MIT permissive |
| Python support | Supports the current Python release >=3.11 |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 2 packagesdistlibpython-gnupg |
| Maintenance | Actively maintained 45 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 412,059 / month, #6,852 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 5 - Production/StableEnvironment :: ConsoleIntended Audience :: DevelopersIntended Audience :: Information TechnologyIntended Audience :: System AdministratorsOperating System :: MacOSOperating System :: POSIXProgramming Language :: PythonProgramming Language :: Python :: 3Programming Language :: Python :: 3 :: OnlyProgramming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.13Programming Language :: Python :: 3.14Topic :: Software Development :: Quality AssuranceTopic :: Software Development :: TestingTopic :: System :: Systems AdministrationTopic :: Utilities |
Evidence: ansible_sign-0.1.6-py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “ansible content signing”
- ansible-signGenerates and validates checksums and GPG signatures for Ansible…
- ansible-creatorA CLI tool that scaffolds new Ansible projects and adds resources to…
- ansible-dev-toolsBundles and installs a curated suite of Ansible development tools…
Give your agent the search over MCP, or paste the wish link into any chat.
More Utilities packages
Converts domain names between Unicode and ASCII-compatible encoding (Punycode) according to IDNA 2008 and Unicode Technical Standard 46, with security validation and broader script coverage than the standard library.
Install it if you work with internationalized domain names, need to validate domains, or use HTTP clients that depend on it transitively.
Detects and normalizes text encoding from unknown or ambiguous sources, supporting all IANA character sets that Python's core library provides codecs for, with the ability to register custom codecs.
Setuptools is a Python build backend and package management tool that handles building, distributing, and installing Python packages, including support for C/C++ extension modules.
Pluggy provides a plugin system that lets you define hook specifications and register implementations to be called in sequence, enabling extensible Python applications without tight coupling.
Install it if you're building an extensible application or framework.
Pygments is a syntax highlighter that colorizes source code and text in over 500 languages and formats, outputting to HTML, LaTeX, RTF, SVG, images, or ANSI terminal sequences.
Install it if you need to display or transform source code.
Six provides utility functions to write Python code that runs on both Python 2.7 and Python 3.3+, smoothing over language differences between the two versions.
See also c2pa-python · paytmchecksum · python-gnupg · signify · ansible-creator · ansible-dev-tools · endesive · ansible-navigator · bagit · cloudsmith-cli