File tree 1 file changed +0
-43
lines changed
1 file changed +0
-43
lines changed Original file line number Diff line number Diff line change 51
51
path : dist/
52
52
- name : Publish distribution to PyPI
53
53
uses : pypa/gh-action-pypi-publish@release/v1
54
-
55
- github-release :
56
- name : >-
57
- Sign the Python distribution with Sigstore
58
- and upload them to GitHub Release
59
- needs :
60
- - publish-to-pypi
61
- runs-on : ubuntu-latest
62
-
63
- permissions :
64
- contents : write # IMPORTANT: mandatory for making GitHub Releases
65
- id-token : write # IMPORTANT: mandatory for sigstore
66
-
67
- steps :
68
- - name : Download all the dists
69
- uses : actions/download-artifact@v3
70
- with :
71
- name : python-package-distributions
72
- path : dist/
73
- - name : Sign the dists with Sigstore
74
-
75
- with :
76
- inputs : >-
77
- ./dist/*.tar.gz
78
- ./dist/*.whl
79
- - name : Create GitHub Release
80
- env :
81
- GITHUB_TOKEN : ${{ github.token }}
82
- run : >-
83
- gh release create
84
- '${{ github.ref_name }}'
85
- --repo '${{ github.repository }}'
86
- --notes ""
87
- - name : Upload artifact signatures to GitHub Release
88
- env :
89
- GITHUB_TOKEN : ${{ github.token }}
90
- # Upload to GitHub Release using the `gh` CLI.
91
- # `dist/` contains the built packages, and the
92
- # sigstore-produced signatures and certificates.
93
- run : >-
94
- gh release upload
95
- '${{ github.ref_name }}' dist/**
96
- --repo '${{ github.repository }}'
You can’t perform that action at this time.
0 commit comments