You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It was added in #1171 but gives advice exactly opposite of what I recommend in pypi-publish. Probably copied from some outdated examples. The correct way would be building in a dedicated job, storing as a GHA artifact, and only uploading it a two-step publishing job. It's also best to show the use of OIDC with that, not long-living API tokens that make it impossible to produce digital signatures.
I'm concerned because I regularly observe people mass-copying random bad examples from the internet and then get upset when I tell them that it's unsupported.