Python
/
ruff
mirror of https://github.com/astral-sh/ruff
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Enable PEP 740 attestations when publishing to PyPI (#21735)

This commit is contained in:
William Woodruff 2025-12-01 13:15:20 -05:00 committed by GitHub
parent 3738ab1c46
commit 53299cbff4
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
.github/workflows/publish-pypi.yml vendored
View File

@ -18,8 +18,7 @@ jobs:
environment: environment:
name: release name: release
permissions: permissions:
# For PyPI's trusted publishing. id-token: write # For PyPI's trusted publishing + PEP 740 attestations
id-token: write
steps: steps:
- name: "Install uv" - name: "Install uv"
uses: astral-sh/setup-uv@1e862dfacbd1d6d858c55d9b792c756523627244 # v7.1.4 uses: astral-sh/setup-uv@1e862dfacbd1d6d858c55d9b792c756523627244 # v7.1.4
@ -28,5 +27,8 @@ jobs:
pattern: wheels-* pattern: wheels-*
path: wheels path: wheels
merge-multiple: true merge-multiple: true
- uses: astral-sh/attest-action@2c727738cea36d6c97dd85eb133ea0e0e8fe754b # v0.0.4
with:
paths: wheels/*
- name: Publish to PyPi - name: Publish to PyPi
run: uv publish -v wheels/* run: uv publish -v wheels/*