Skip to content

Commit

Permalink
ci: Add GitHub artifact attestations to package distribution (#568)
Browse files Browse the repository at this point in the history
  • Loading branch information
matthewfeickert authored May 28, 2024
1 parent 3b26eb7 commit 9c3a275
Showing 1 changed file with 7 additions and 0 deletions.
7 changes: 7 additions & 0 deletions .github/workflows/cd.yml
Original file line number Diff line number Diff line change
Expand Up @@ -29,11 +29,18 @@ jobs:
url: https://pypi.org/p/hist
permissions:
id-token: write
attestations: write
contents: read

steps:
- uses: actions/download-artifact@v4
with:
name: Packages
path: dist

- name: Generate artifact attestation for sdist and wheel
uses: actions/attest-build-provenance@173725a1209d09b31f9d30a3890cf2757ebbff0d # v1.1.2
with:
subject-path: "dist/hist-*"

- uses: pypa/gh-action-pypi-publish@release/v1

0 comments on commit 9c3a275

Please sign in to comment.