v0.4.6 — two-tier setup-local hardening + per-stage model flags #9
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Publish to PyPI | |
| # Cuts a release to PyPI when a GitHub Release is published. | |
| # Auth is PyPI Trusted Publishing (OIDC) — no API token is stored. | |
| # One-time setup on pypi.org → project "remyxai" → Publishing → add a | |
| # GitHub trusted publisher with: | |
| # Owner: remyxai Repository: remyxai-cli | |
| # Workflow: publish.yml Environment: pypi | |
| on: | |
| release: | |
| types: [published] | |
| jobs: | |
| publish: | |
| runs-on: ubuntu-latest | |
| environment: pypi | |
| permissions: | |
| id-token: write # required for Trusted Publishing (OIDC) | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-python@v5 | |
| with: | |
| python-version: "3.x" | |
| - name: Build sdist + wheel | |
| run: | | |
| python -m pip install --upgrade build | |
| python -m build | |
| - name: Check artifacts | |
| run: | | |
| python -m pip install --upgrade twine | |
| twine check dist/* | |
| - name: Publish to PyPI | |
| uses: pypa/gh-action-pypi-publish@release/v1 |