Python/uv
1
0
Fork 0
mirror of https://github.com/astral-sh/uv synced 2026-01-22 05:50:25 -05:00
Code Issues Packages Projects Releases Wiki Activity

Enable PEP 740 attestations when publishing to PyPI (#16910)

Browse Source
This commit is contained in:
William Woodruff
2025-12-01 13:01:33 -05:00
committed by GitHub
parent efa47adefb
commit fbf925ee63
1 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
.github/workflows/publish-pypi.yml vendored
View File

@@ -18,8 +18,7 @@ jobs:
environment:
name: release
permissions:
# For PyPI's trusted publishing.
id-token: write
id-token: write # For PyPI's trusted publishing + PEP 740 attestations
steps:
- name: "Install uv"
uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6.8.0
@@ -28,6 +27,9 @@ jobs:
pattern: wheels_uv-*
path: wheels_uv
merge-multiple: true
- uses: astral-sh/attest-action@2c727738cea36d6c97dd85eb133ea0e0e8fe754b # v0.0.4
with:
paths: wheels_uv/*
- name: Publish to PyPI
run: uv publish -v wheels_uv/*
@@ -37,8 +39,7 @@ jobs:
environment:
name: release
permissions:
# For PyPI's trusted publishing.
id-token: write
id-token: write # For PyPI's trusted publishing + PEP 740 attestations
steps:
- name: "Install uv"
uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6.8.0
@@ -47,5 +48,8 @@ jobs:
pattern: wheels_uv_build-*
path: wheels_uv_build
merge-multiple: true
- uses: astral-sh/attest-action@2c727738cea36d6c97dd85eb133ea0e0e8fe754b # v0.0.4
with:
paths: wheels_uv_build/*
- name: Publish to PyPI
run: uv publish -v wheels_uv_build/*