From fb0aa4ad5ea969e09637ef1b79362eb63a141a16 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Sviatoslav=20Sydorenko=20=28=D0=A1=D0=B2=D1=8F=D1=82=D0=BE?= =?UTF-8?q?=D1=81=D0=BB=D0=B0=D0=B2=20=D0=A1=D0=B8=D0=B4=D0=BE=D1=80=D0=B5?= =?UTF-8?q?=D0=BD=D0=BA=D0=BE=29?= Date: Tue, 3 Sep 2024 00:16:17 +0200 Subject: [PATCH] Opt into uploading PEP 740 digital publish attestations to PyPI https://github.com/pypa/gh-action-pypi-publish/pull/236 --- .github/workflows/pypi-package.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/pypi-package.yml b/.github/workflows/pypi-package.yml index f48b923e7..64f53da46 100644 --- a/.github/workflows/pypi-package.yml +++ b/.github/workflows/pypi-package.yml @@ -48,6 +48,7 @@ jobs: - name: Upload package to Test PyPI uses: pypa/gh-action-pypi-publish@release/v1 with: + attestations: true repository-url: https://test.pypi.org/legacy/ # Upload to real PyPI on GitHub Releases. @@ -67,3 +68,5 @@ jobs: - name: Upload package to PyPI uses: pypa/gh-action-pypi-publish@release/v1 + with: + attestations: true