python-awips/.github/workflows/release.yml
Ryan May 5f875d32ec
CI: Switch to PyPI trusted publisher
This replaces using a fixed secret API token that is attached to a
single user.
2025-02-13 12:45:22 -07:00

52 lines
1.2 KiB
YAML

name: Build python-awips and Publish for pip
on:
workflow_dispatch:
release:
types:
- published
jobs:
build:
name: Build Release Packages
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- name: Set up Python
id: setup
uses: actions/setup-python@v4
with:
python-version: 3.x
- name: Install build tools
run: |
python -m pip install --upgrade pip
python -m pip install --upgrade build
python -m pip install --upgrade setuptools
- name: Build packages
run: python -m build
- name: Save built packages as artifact
uses: actions/upload-artifact@v4
with:
path: dist/
retention-days: 5
publish:
name: Publish to PyPI
needs: build
environment:
name: PyPI
url: https://pypi.org/project/python-awips/
permissions:
id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
runs-on: ubuntu-latest
steps:
- name: Download packages
uses: actions/download-artifact@v4
with:
path: ./dist
name: artifact
- name: Publish Package
uses: pypa/gh-action-pypi-publish@v1.12.4