2.5.1.dev2 #20
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: PyPI Release | |
| on: | |
| release: | |
| types: [published] | |
| jobs: | |
| publish: | |
| runs-on: ubuntu-latest | |
| environment: release | |
| permissions: | |
| # IMPORTANT: this permission is mandatory for trusted publishing | |
| id-token: write | |
| steps: | |
| - uses: actions/[email protected] | |
| - name: Pull all release assets | |
| uses: robinraju/[email protected] | |
| with: | |
| releaseId: ${{ github.event.release.id }} | |
| fileName: "*" | |
| tarBall: false | |
| zipBall: false | |
| out-file-path: "dist" | |
| # Check that all the files that successfully uploaded from the release-gh-draft | |
| # action have not been tampered with. This however ignores any extra files that | |
| # were manually added. | |
| - name: Verify release hashes | |
| run: | | |
| cd dist | |
| gpg --batch --output release.decrypted.sha512sum --passphrase ${{ secrets.GITHUB_TOKEN }} --decrypt release.sha512sum.gpg | |
| diff -s release.sha512sum release.decrypted.sha512sum | |
| sha512sum -c release.decrypted.sha512sum | |
| rm release.* | |
| - name: Publish to PyPI | |
| uses: pypa/gh-action-pypi-publish@release/v1 |