Thanks to visit codestin.com Credit goes to github.com
We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 62d70f4 commit 157f790Copy full SHA for 157f790
.github/workflows/release.yml
@@ -72,6 +72,7 @@ jobs:
72
if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
73
permissions:
74
id-token: write
75
+ attestations: write
76
contents: write
77
steps:
78
- name: Download artifacts
@@ -80,6 +81,10 @@ jobs:
80
81
pattern: dist-*
82
merge-multiple: true
83
path: dist
84
+ - name: Attest provenance
85
+ uses: actions/attest-build-provenance@v1
86
+ with:
87
+ subject-path: dist/*
88
- name: Upload to PyPI
89
uses: pypa/gh-action-pypi-publish@release/v1
90
- name: Create GitHub release
0 commit comments