python311Packages.sigstore: disable failing tests

pkgs/development/python-modules/sigstore/default.nix

@@ -6,6 +6,7 @@
 , flit-core
 , id
 , importlib-resources
+, pretend
 , pydantic
 , pyjwt
 , pyopenssl
@@ -16,6 +17,7 @@
 , sigstore-protobuf-specs
 , sigstore-rekor-types
 , tuf
+, pythonOlder
 }:
 
 buildPythonPackage rec {
@@ -23,6 +25,8 @@ buildPythonPackage rec {
   version = "2.1.0";
   pyproject = true;
 
+  disabled = pythonOlder "3.8";
+
   src = fetchFromGitHub {
     owner = "sigstore";
     repo = "sigstore-python";
@@ -51,13 +55,31 @@ buildPythonPackage rec {
   ];
 
   nativeCheckInputs = [
+    pretend
     pytestCheckHook
   ];
 
+  preCheck = ''
+    export HOME=$(mktemp -d)
+  '';
+
   pythonImportsCheck = [
     "sigstore"
   ];
 
+  disabledTests = [
+    # Tests require network access
+    "test_fail_init_url"
+    "test_get_identity_token_bad_code"
+    "test_identity_proof_claim_lookup"
+    "test_init_url"
+    "test_production"
+    "test_sct_verify_keyring"
+    "test_sign_rekor_entry_consistent"
+    "test_verification_materials_retrieves_rekor_entry"
+    "test_verifier"
+  ];
+
   meta = with lib; {
     description = "A codesigning tool for Python packages";
     homepage = "https://github.com/sigstore/sigstore-python";