Skip to content

Conversation

@woodruffw
Copy link
Member

@woodruffw woodruffw commented May 13, 2025

These steps are superfluous now that gh-action-pypi-publish generates and uploads PEP 740-compatible attestations by default on its own.

(They also served a slightly different purpose than PEP 740 attestations, since they were never uploaded to PyPI and used a different format.)

Closes #1788.

+CC @webknjaz @di for review 🙂

These steps are superfluous now that gh-action-pypi-publish
generates and uploads PEP 740-compatible attestations by default
on its own.

(They also served a slightly different purpose than PEP 740
attestations, since they were never uploaded to PyPI and used
a different format.)

Closes pypa#1788.

Signed-off-by: William Woodruff <[email protected]>
Copy link
Member

@di di left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM (but I am not an 'editor' here)

Copy link
Member

@webknjaz webknjaz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@webknjaz webknjaz added this pull request to the merge queue May 13, 2025
Merged via the queue into pypa:main with commit dbb263c May 13, 2025
8 checks passed
@woodruffw woodruffw deleted the ww/rm-manual-sigstore branch May 13, 2025 21:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Remove gh-action-sigstore-python from the GitHub Actions publishing guide

3 participants