Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ci: Add GitHub artifact attestations to package distribution #3126

Merged
merged 2 commits into from
May 22, 2024
Merged

ci: Add GitHub artifact attestations to package distribution #3126

merged 2 commits into from
May 22, 2024

Commits on May 21, 2024

  1. chore: update pre-commit hooks 

    updates:
- github.com/python-jsonschema/check-jsonschema: v0.28.2 → v0.28.4
    @matthewfeickert
    matthewfeickert committed May 21, 2024
    Configuration menu
    Copy the full SHA
    ac830a3 View commit details
    Browse the repository at this point in the history

  2. ci: Add GitHub artifact attestations to package distribution 

    * Add generation of GitHub artifact attestations to built sdist and wheel
  before upload.
  c.f.:
   - https://github.blog/2024-05-02-introducing-artifact-attestations-now-in-public-beta/
   - https://docs.github.com/en/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds
* Add verification of artifact attestation before publishing awkward to PyPI
  using the 'gh attestation verify' CLI API, added in v2.49.0.
   - c.f. https://github.com/cli/cli/releases/tag/v2.49.0
    @matthewfeickert
    matthewfeickert committed May 21, 2024
    Configuration menu
    Copy the full SHA
    8f01e17 View commit details
    Browse the repository at this point in the history