Sign with sigstore

tiran · tiran · commit 63ac34ec725a · 2024-04-25T06:26:42.000+02:00
Signed-off-by: Christian Heimes &lt;cheimes@redhat.com&gt;
diff --git a/.github/workflows/pypi.yaml b/.github/workflows/pypi.yaml
@@ -76,5 +76,12 @@ jobs:
                   name: Packages
                   path: dist
 
+            - uses: sigstore/gh-action-sigstore-python@v2.1.1
+              with:
+                  upload-signing-artifact: true
+                  inputs: >-
+                      ./dist/*.tar.gz
+                      ./dist/*.whl
+
             - name: Upload to PyPI
               uses: pypa/gh-action-pypi-publish@release/v1
