v0.3.0 — Verification Context v1.0 + Attestation Trust Boundary #4

	name: Publish to PyPI

	on:
	release:
	types: [published]

	permissions:
	contents: read
	id-token: write

	jobs:
	pypi-publish:
	name: Publish release to PyPI
	runs-on: ubuntu-latest
	environment: pypi
	steps:
	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
	- name: Set up Python
	uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
	with:
	python-version: "3.10"
	- name: Install build dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install build
	- name: Build package
	run: python -m build
	- name: Publish package distributions to PyPI
	# v1.14.2 (twine >= 7): the older release/v1 pin ships twine < 7,
	# which rejects Metadata-Version 2.5 emitted by floating hatchling.
	uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
	with:
	skip-existing: true

Navigation Menu