Merge pull request #12177 from amaltaro/ci-attestations

Integrate packate attestations in the CI/CD pipeline
dmwm · Nov 22, 2024 · 56a068e · 56a068e
2 parents 867b44e + ce35fea
commit 56a068e
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.github/workflows/pypi_build_publish_template.yaml b/.github/workflows/pypi_build_publish_template.yaml
@@ -32,5 +32,13 @@ jobs:
           awk "/(${{ inputs.wmcore_component }}$)|(${{ inputs.wmcore_component }},)/ {print \$1}" requirements.wmcore.txt > requirements.txt
       - name: Build sdist
         run: python3 setup.py clean sdist
+      - name: List contents before attestation
+        run: |
+          ls ${{ github.workspace }}
+          ls ${{ github.workspace }}/dist
+      - name: Attest package
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: '${{ github.workspace }}/dist/${{ inputs.wmcore_component }}-*'
       - name: Upload package distribution to PyPi
         uses: pypa/gh-action-pypi-publish@release/v1