name: Publish Python 🐍 distribution 📦 to PyPI and TestPyPI on: push jobs: build: name: Build distribution 📦 runs-on: ubuntu-latest env: RUNNER_TOOL_CACHE: /toolcache # https://about.gitea.com/resources/tutorials/enable-gitea-actions-cache-to-accelerate-cicd AGENT_TOOLSDIRECTORY: /toolcache # https://github.com/actions/setup-python/issues/824 steps: - uses: actions/checkout@v4 - name: Set up Python uses: actions/setup-python@v5 with: python-version: "3.x" - name: Install pypa/build run: >- python3 -m pip install build --user - name: Build a binary wheel and a source tarball run: python3 -m build - name: Store the distribution packages uses: actions/upload-artifact@v3 with: name: python-package-distributions path: dist/ publish-to-pypi: name: >- Publish Python 🐍 distribution 📦 to PyPI if: startsWith(github.ref, 'refs/tags/') # only publish to PyPI on tag pushes needs: - build runs-on: ubuntu-latest environment: name: pypi url: https://pypi.org/p/goat_monitor permissions: id-token: write # IMPORTANT: mandatory for trusted publishing env: RUNNER_TOOL_CACHE: /toolcache # https://about.gitea.com/resources/tutorials/enable-gitea-actions-cache-to-accelerate-cicd AGENT_TOOLSDIRECTORY: /toolcache # https://github.com/actions/setup-python/issues/824 steps: - name: Download all the dists uses: actions/download-artifact@v3 with: name: python-package-distributions path: dist/ - name: Publish distribution 📦 to PyPI uses: pypa/gh-action-pypi-publish@release/v1 with: password: ${{ secrets.PYPI_API_TOKEN }} # github-release: # name: >- # Sign the Python 🐍 distribution 📦 with Sigstore # and upload them to GitHub Release # needs: # - publish-to-pypi # runs-on: ubuntu-latest # permissions: # contents: write # IMPORTANT: mandatory for making GitHub Releases # id-token: write # IMPORTANT: mandatory for sigstore # env: # RUNNER_TOOL_CACHE: /toolcache # https://about.gitea.com/resources/tutorials/enable-gitea-actions-cache-to-accelerate-cicd # AGENT_TOOLSDIRECTORY: /toolcache # https://github.com/actions/setup-python/issues/824 # steps: # - name: Download all the dists # uses: actions/download-artifact@v3 # with: # name: python-package-distributions # path: dist/ # - name: Sign the dists with Sigstore # uses: sigstore/gh-action-sigstore-python@v2.1.1 # with: # inputs: >- # ./dist/*.tar.gz # ./dist/*.whl # - name: Create GitHub Release # env: # GITHUB_TOKEN: ${{ github.token }} # run: >- # gh release create # '${{ github.ref_name }}' # --repo '${{ github.repository }}' # --notes "" # - name: Upload artifact signatures to GitHub Release # env: # GITHUB_TOKEN: ${{ github.token }} # # Upload to GitHub Release using the `gh` CLI. # # `dist/` contains the built packages, and the # # sigstore-produced signatures and certificates. # run: >- # gh release upload # '${{ github.ref_name }}' dist/** # --repo '${{ github.repository }}' # publish-to-testpypi: # name: Publish Python 🐍 distribution 📦 to TestPyPI # needs: # - build # runs-on: ubuntu-latest # environment: # name: testpypi # url: https://test.pypi.org/p/goat_monitor # permissions: # id-token: write # IMPORTANT: mandatory for trusted publishing # env: # RUNNER_TOOL_CACHE: /toolcache # https://about.gitea.com/resources/tutorials/enable-gitea-actions-cache-to-accelerate-cicd # AGENT_TOOLSDIRECTORY: /toolcache # https://github.com/actions/setup-python/issues/824 # steps: # - name: Download all the dists # uses: actions/download-artifact@v3 # with: # name: python-package-distributions # path: dist/ # - name: Publish distribution 📦 to TestPyPI # uses: pypa/gh-action-pypi-publish@release/v1 # with: # password: ${{ secrets.TEST_PYPI_API_TOKEN }} # repository-url: https://test.pypi.org/legacy/