zhou/gh-action-pypi-publish
1
0
Fork 0
mirror of https://gitcode.com/gh_mirrors/gh/gh-action-pypi-publish.git synced 2026-07-02 18:27:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
354 Commits 13 Branches 46 Tags
03e1883a77af0d89736b49ac99f48cc0fc420a5f
Commit Graph

4 Commits

Author SHA1 Message Date
Sviatoslav Sydorenko f14df0bb20 💅 Add a return type to die() @ attestations 2024-12-10 01:35:33 +01:00
William Woodruff fec2f0c0ce attestations: collect *.zip sdists as well 
Signed-off-by: William Woodruff <william@trailofbits.com>
 2024-11-06 13:43:44 -05:00
Sviatoslav Sydorenko 0ab0b79471 🚑 Invert the dists-to-attest validity check 
This bug sneaked into #236 but should not affect many people as the
attestations generation feature is experimental and opt-in.

Fixes #256
 2024-09-03 10:25:06 +02:00
William Woodruff 8a08d61689 Expose PEP 740 attestations functionality 
PR #236

This patch adds PEP 740 attestation generation to the workflow: when the Trusted Publishing flow is used, this will generate a publish attestation for each distribution being uploaded. These generated attestations are then fed into `twine`, which newly supports them via `--attestations`.

Ref: https://github.com/pypi/warehouse/issues/15871
 2024-09-01 02:50:29 +02:00