Skip to content

Bump sigstore/gh-action-sigstore-python from 3.1.0 to 3.2.0 #8

Bump sigstore/gh-action-sigstore-python from 3.1.0 to 3.2.0

Bump sigstore/gh-action-sigstore-python from 3.1.0 to 3.2.0 #8

Workflow file for this run

name: Publish on PyPI
on: push
jobs:
build:
name: Build distributions
if: startsWith(github.ref, 'refs/tags/')
runs-on: ubuntu-24.04
steps:
- uses: actions/checkout@v5
with:
fetch-depth: 0
- uses: actions/setup-python@v6
with:
python-version: "3.x"
- run: pip install build
- run: python -m build
- uses: actions/upload-artifact@v5
with:
name: build
path: dist/
publish-to-pypi:
name: Publish distribution to PyPI
needs:
- build
runs-on: ubuntu-24.04
environment:
name: pypi
url: https://pypi.org/p/intmath
permissions:
id-token: write
steps:
- uses: actions/download-artifact@v6
with:
pattern: build
path: dist/
merge-multiple: true
- uses: pypa/gh-action-pypi-publish@release/v1
github-release:
name: >-
Sign the Python distribution with Sigstore
and upload them to GitHub Release
needs:
- publish-to-pypi
runs-on: ubuntu-24.04
permissions:
contents: write
id-token: write
steps:
- uses: actions/download-artifact@v6
with:
pattern: build
path: dist/
merge-multiple: true
- uses: sigstore/gh-action-sigstore-python@v3.2.0
with:
inputs: >-
./dist/*.tar.gz
./dist/*.whl
- name: Create GitHub Release
env:
GITHUB_TOKEN: ${{ github.token }}
run: >-
gh release create '${{ github.ref_name }}'
--repo '${{ github.repository }}'
--prerelease
--generate-notes
- name: Upload artifact signatures to GitHub Release
env:
GITHUB_TOKEN: ${{ github.token }}
run: >-
gh release upload
'${{ github.ref_name }}' dist/**
--repo '${{ github.repository }}'