diff --git a/.github/workflows/build-publish.yml b/.github/workflows/build-publish.yml index 44fb112..4d079cf 100644 --- a/.github/workflows/build-publish.yml +++ b/.github/workflows/build-publish.yml @@ -61,9 +61,10 @@ jobs: name: python-package-distributions path: dist/ - name: Publish distribution to TestPyPI - uses: pypa/gh-action-pypi-publish@8a08d616893759ef8e1aa1f2785787c0b97e20d6 # v1.10.0 + uses: pypa/gh-action-pypi-publish@0ab0b79471669eb3a4d647e625009c62f9f3b241 # v1.10.1 with: skip-existing: true + attestations: true repository-url: https://test.pypi.org/legacy/ publish-to-pypi: @@ -84,9 +85,10 @@ jobs: name: python-package-distributions path: dist/ - name: Publish distribution to PyPI - uses: pypa/gh-action-pypi-publish@8a08d616893759ef8e1aa1f2785787c0b97e20d6 # v1.10.0 + uses: pypa/gh-action-pypi-publish@0ab0b79471669eb3a4d647e625009c62f9f3b241 # v1.10.1 with: skip-existing: true + attestations: true github-release: name: Attest Python distribution artifacts and upload them to the GitHub Release