Make the checksums optional all the way up the stack (#298) #15

	name: Build and publish

	on:
	push:
	branches: [ "main" ]
	tags: ["*"]

	jobs:
	build:
	name: Build distribution
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4
	- name: Set up Python
	uses: actions/setup-python@v4
	with:
	python-version: "3.9"
	- name: Install pypa/build
	run: >-
	python3 -m
	pip install
	build
	--user
	- name: Build a binary wheel and a source tarball
	run: python3 -m build -o dist cli
	- name: Store the distribution packages
	uses: actions/upload-artifact@v3
	with:
	name: python-package-distributions
	path: dist/

	publish-to-pypi:
	name: >-
	Publish Python distribution to PyPI
	if: startsWith(github.ref, 'refs/tags/')
	needs:
	- build
	runs-on: ubuntu-latest
	environment:
	name: pypi
	url: https://pypi.org/p/etos-client
	permissions:
	id-token: write

	steps:
	- name: Download all the dists
	uses: actions/download-artifact@v3
	with:
	name: python-package-distributions
	path: dist/
	- name: Publish distribution to PyPI
	uses: pypa/gh-action-pypi-publish@release/v1

	github-release:
	name: >-
	Sign the Python distribution with Sigstore
	and upload them to GitHub Release
	needs:
	- publish-to-pypi
	runs-on: ubuntu-latest
	permissions:
	contents: write
	id-token: write
	steps:
	- name: Download all the dists
	uses: actions/download-artifact@v3
	with:
	name: python-package-distributions
	path: dist/
	- name: Sign the dists with Sigstore
	uses: sigstore/[email protected]
	with:
	inputs: >-
	./dist/*.tar.gz
	./dist/*.whl

Provide feedback