8000 [FEAT]: Update workflows to use attestations when publishing to PyPI. · Issue #63 · tektronix/python-package-ci-cd · GitHub

More Web Proxy on the site http://driver.im/

[FEAT]: Update workflows to use attestations when publishing to PyPI. #63

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

nfelt14 opened this issue Sep 4, 2024 · 2 comments

Labels

enhancement reusable-workflows

Collaborator

nfelt14 commented

•

Description

Update workflows to use attestations when publishing to PyPI.

pypa/gh-action-pypi-publish#255

Additional Information

No response

nfelt14 added enhancement reusable-workflows labels

Collaborator Author

nfelt14 commented

relates to #41

Collaborator Author

nfelt14 commented

•

Things to investigate, leaving here for future use:

https://github.com/marketplace/actions/gh-action-sigstore-python
https://packaging.python.org/en/latest/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/
- https://packaging.python.org/en/latest/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/#signing-the-distribution-packages
Could also use this: Expose PEP 740 attestations functionality pypa/gh-action-pypi-publish#236
- Then the build attestations from the current workflows could be removed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

0