@@ -72,43 +72,39 @@ jobs:
7272 packages-dir : dist/
7373 github-release :
7474 name : >-
75- Sign the Python 🐍 distribution 📦 with Sigstore
76- and upload them to GitHub Release
75+ Sign the Python 🐍 distribution 📦 with Sigstore and upload them to GitHub
76+ Release
7777 needs :
78- - pypi-publish
78+ - pypi-publish
7979 runs-on : ubuntu-latest
8080
8181 permissions :
82- contents : write # IMPORTANT: mandatory for making GitHub Releases
83- id-token : write # IMPORTANT: mandatory for sigstore
82+ contents : write # IMPORTANT: mandatory for making GitHub Releases
83+ id-token : write # IMPORTANT: mandatory for sigstore
8484
8585 steps :
86- - name : Download all the dists
87- uses : actions/download-artifact@v4
88- with :
89- name : pypi-dists
90- path : dist/
91- - name : Sign the dists with Sigstore
92- 93- with :
94- inputs : >-
95- ./dist/*.tar.gz
96- ./dist/*.whl
97- - name : Create GitHub Release
98- env :
99- GITHUB_TOKEN : ${{ github.token }}
100- run : >-
101- gh release create
102- "$GITHUB_REF_NAME"
103- --repo "$GITHUB_REPOSITORY"
104- --notes ""
105- - name : Upload artifact signatures to GitHub Release
106- env :
107- GITHUB_TOKEN : ${{ github.token }}
108- # Upload to GitHub Release using the `gh` CLI.
109- # `dist/` contains the built packages, and the
110- # sigstore-produced signatures and certificates.
111- run : >-
112- gh release upload
113- "$GITHUB_REF_NAME" dist/**
114- --repo "$GITHUB_REPOSITORY"
86+ - name : Download all the dists
87+ uses : actions/download-artifact@v4
88+ with :
89+ name : pypi-dists
90+ path : dist/
91+ - name : Sign the dists with Sigstore
92+ 93+ with :
94+ inputs : >-
95+ ./dist/*.tar.gz ./dist/*.whl
96+ - name : Create GitHub Release
97+ env :
98+ GITHUB_TOKEN : ${{ github.token }}
99+ run : >-
100+ gh release create "$GITHUB_REF_NAME" --repo "$GITHUB_REPOSITORY"
101+ --notes ""
102+ - name : Upload artifact signatures to GitHub Release
103+ env :
104+ GITHUB_TOKEN : ${{ github.token }}
105+ # Upload to GitHub Release using the `gh` CLI.
106+ # `dist/` contains the built packages, and the
107+ # sigstore-produced signatures and certificates.
108+ run : >-
109+ gh release upload "$GITHUB_REF_NAME" dist/** --repo
110+ "$GITHUB_REPOSITORY"
0 commit comments