Add trusted publishing #6
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Python Wheels | |
on: | |
push: | |
branches: ["main"] | |
tags: | |
- "**" | |
pull_request: | |
workflow_dispatch: | |
concurrency: | |
group: wheels-${{ github.ref }} | |
cancel-in-progress: true | |
defaults: | |
run: | |
shell: bash -eux {0} | |
jobs: | |
build_dist: | |
name: Build Distribution Files | |
runs-on: ubuntu-latest | |
steps: | |
- uses: actions/checkout@v4 | |
with: | |
fetch-depth: 0 | |
persist-credentials: false | |
- uses: actions/setup-python@v5 | |
with: | |
# Build sdist on lowest supported Python | |
python-version: '3.9' | |
- name: Install build | |
run: | | |
python -m pip install build | |
- name: build the dist files | |
run: | | |
python -m build . | |
- name: Upload the dist files | |
uses: actions/upload-artifact@v4 | |
with: | |
name: dist-${{ github.run_id }} | |
path: ./dist/*.* | |
test_dist: | |
needs: [build_dist] | |
name: Test Distribution Files | |
runs-on: ubuntu-latest | |
steps: | |
- uses: actions/checkout@v4 | |
with: | |
fetch-depth: 0 | |
persist-credentials: false | |
- uses: actions/setup-python@v5 | |
with: | |
# Build sdist on lowest supported Python | |
python-version: '3.9' | |
- name: Download the dists | |
uses: actions/download-artifact@v4 | |
with: | |
name: dist-${{ github.run_id }} | |
path: dist/ | |
- name: Test the sdist | |
run: | | |
cd dist | |
pip install *.tar.gz | |
python -c "import flask_pymongo" | |
pip uninstall -y flask_pymongo | |
- name: Test the wheel | |
run: | | |
cd dist | |
pip install *.whl | |
python -c "import flask_pymongo" | |
pip uninstall -y flask_pymongo | |
publish: | |
# https://packaging.python.org/en/latest/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/#publishing-the-distribution-to-pypi | |
needs: [test_dist] | |
if: startsWith(github.ref, 'refs/tags/') | |
runs-on: ubuntu-latest | |
environment: release | |
permissions: | |
id-token: write | |
steps: | |
- name: Download the dists | |
uses: actions/download-artifact@v4 | |
with: | |
name: dist-${{ github.run_id }} | |
path: dist/ | |
- name: Publish distribution 📦 to PyPI | |
uses: pypa/gh-action-pypi-publish@release/v1 |