|
18 | 18 | - name: Install pypa/build |
19 | 19 | run: pip install build |
20 | 20 | - name: Build a binary wheel and a source tarball |
21 | | - run: python3 -m build |
| 21 | + run: python -m build |
22 | 22 | - name: Store the distribution packages |
23 | 23 | uses: actions/upload-artifact@v4 |
24 | 24 | with: |
|
34 | 34 | runs-on: ubuntu-latest |
35 | 35 | environment: |
36 | 36 | name: pypi |
37 | | - url: https://pypi.org/p/autointent # Replace <package-name> with your PyPI project name |
| 37 | + url: https://pypi.org/p/test_ci_release |
38 | 38 | permissions: |
39 | 39 | id-token: write # IMPORTANT: mandatory for trusted publishing |
40 | 40 |
|
|
44 | 44 | with: |
45 | 45 | name: python-package-distributions |
46 | 46 | path: dist/ |
47 | | - |
48 | 47 | - name: Publish distribution 📦 to PyPI |
49 | 48 | uses: pypa/gh-action-pypi-publish@release/v1 |
50 | 49 |
|
@@ -73,12 +72,16 @@ jobs: |
73 | 72 | inputs: >- |
74 | 73 | ./dist/*.tar.gz |
75 | 74 | ./dist/*.whl |
76 | | - release-signing-artifacts: false # Prevent the action from uploading artifacts, because, by default it will uplpoad artifacts with tag name too |
| 75 | + # Prevent the action from uploading artifacts, because, by default it will uplpoad artifacts with tag name, too |
| 76 | + release-signing-artifacts: false |
77 | 77 |
|
78 | | - - name: Upload artifacts to release |
79 | | - uses: softprops/action-gh-release@v1 |
80 | | - with: |
81 | | - files: | |
82 | | - ./dist/* |
| 78 | + - name: Upload artifact signatures to GitHub Release |
83 | 79 | env: |
84 | 80 | GITHUB_TOKEN: ${{ github.token }} |
| 81 | + # Upload to GitHub Release using the `gh` CLI. |
| 82 | + # `dist/` contains the built packages, and the |
| 83 | + # sigstore-produced signatures and certificates. |
| 84 | + run: >- |
| 85 | + gh release upload |
| 86 | + '${{ github.ref_name }}' dist/** |
| 87 | + --repo '${{ github.repository }}' |
0 commit comments