3131 publish-to-pypi :
3232 name : >-
3333 Publish Python OpenSIPS Python package to PyPI
34- # if: startsWith(github.ref, 'refs/tags/') # only publish to PyPI on tag pushes
34+ if : startsWith(github.ref, 'refs/tags/') # only publish to PyPI on tag pushes
3535 needs :
3636 - build
3737 runs-on : ubuntu-latest
@@ -50,45 +50,45 @@ jobs:
5050 - name : Publish distribution OpenSIPS to PyPI
5151 uses : pypa/gh-action-pypi-publish@release/v1
5252
53- # github-release:
54- # name: >-
55- # Sign the OpenSIPS Python package with Sigstore
56- # and upload them to GitHub Release
57- # needs:
58- # - publish-to-pypi
59- # runs-on: ubuntu-latest
60- #
61- # permissions:
62- # contents: write # IMPORTANT: mandatory for making GitHub Releases
63- # id-token: write # IMPORTANT: mandatory for sigstore
64- #
65- # steps:
66- # - name: Download all the dists
67- # uses: actions/download-artifact@v4
68- # with:
69- # name: python-package-distributions
70- # path: dist/
71- # - name: Sign the dists with Sigstore
72- # uses: sigstore/gh-action-sigstore-python@v2.1.1
73- # with:
74- # inputs: >-
75- # ./dist/*.tar.gz
76- # ./dist/*.whl
77- # - name: Create GitHub Release
78- # env:
79- # GITHUB_TOKEN: ${{ github.token }}
80- # run: >-
81- # gh release create
82- # '${{ github.ref_name }}'
83- # --repo '${{ github.repository }}'
84- # --notes ""
85- # - name: Upload artifact signatures to GitHub Release
86- # env:
87- # GITHUB_TOKEN: ${{ github.token }}
88- # # Upload to GitHub Release using the `gh` CLI.
89- # # `dist/` contains the built packages, and the
90- # # sigstore-produced signatures and certificates.
91- # run: >-
92- # gh release upload
93- # '${{ github.ref_name }}' dist/**
94- # --repo '${{ github.repository }}'
53+ github-release :
54+ name : >-
55+ Sign the OpenSIPS Python package with Sigstore
56+ and upload them to GitHub Release
57+ needs :
58+ - publish-to-pypi
59+ runs-on : ubuntu-latest
60+
61+ permissions :
62+ contents : write # IMPORTANT: mandatory for making GitHub Releases
63+ id-token : write # IMPORTANT: mandatory for sigstore
64+
65+ steps :
66+ - name : Download all the dists
67+ uses : actions/download-artifact@v4
68+ with :
69+ name : python-package-distributions
70+ path : dist/
71+ - name : Sign the dists with Sigstore
72+ uses : sigstore/gh-action-sigstore-python@v2.1.1
73+ with :
74+ inputs : >-
75+ ./dist/*.tar.gz
76+ ./dist/*.whl
77+ - name : Create GitHub Release
78+ env :
79+ GITHUB_TOKEN : ${{ github.token }}
80+ run : >-
81+ gh release create
82+ '${{ github.ref_name }}'
83+ --repo '${{ github.repository }}'
84+ --notes ""
85+ - name : Upload artifact signatures to GitHub Release
86+ env :
87+ GITHUB_TOKEN : ${{ github.token }}
88+ # Upload to GitHub Release using the `gh` CLI.
89+ # `dist/` contains the built packages, and the
90+ # sigstore-produced signatures and certificates.
91+ run : >-
92+ gh release upload
93+ '${{ github.ref_name }}' dist/**
94+ --repo '${{ github.repository }}'
0 commit comments