diff --git a/pkgs/development/python-modules/in-toto-attestation/default.nix b/pkgs/development/python-modules/in-toto-attestation/default.nix
new file mode 100644
index 000000000000..44d46570a88d
--- /dev/null
+++ b/pkgs/development/python-modules/in-toto-attestation/default.nix
@@ -0,0 +1,44 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchPypi,
+
+  # build-system
+  hatchling,
+
+  # dependencies
+  protobuf,
+}:
+
+buildPythonPackage rec {
+  pname = "in-toto-attestation";
+  version = "0.9.3";
+  pyproject = true;
+
+  # Tags on GitHub do not match the Pypi versions
+  src = fetchPypi {
+    pname = "in_toto_attestation";
+    inherit version;
+    hash = "sha256-zAz5dBfZSVO5/ubp1BWhHFm01HzuTxN0b/6TWyjj6MQ=";
+  };
+
+  build-system = [
+    hatchling
+  ];
+
+  dependencies = [
+    protobuf
+  ];
+
+  pythonImportsCheck = [ "in_toto_attestation" ];
+
+  # No tests in the Pypi archive
+  doCheck = false;
+
+  meta = {
+    description = "Python implementation of in-toto attestations";
+    homepage = "https://github.com/in-toto/attestation/tree/main/python";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ GaetanLepage ];
+  };
+}
diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix
index ba89f00430b1..528ea1a3185a 100644
--- a/pkgs/top-level/python-packages.nix
+++ b/pkgs/top-level/python-packages.nix
@@ -7142,6 +7142,8 @@ self: super: with self; {
 
   in-place = callPackage ../development/python-modules/in-place { };
 
+  in-toto-attestation = callPackage ../development/python-modules/in-toto-attestation { };
+
   incomfort-client = callPackage ../development/python-modules/incomfort-client { };
 
   incremental = callPackage ../development/python-modules/incremental { };