diff --git a/.github/workflows/workflow.yml b/.github/workflows/workflow.yml index 2ed7e4b..d9d1652 100644 --- a/.github/workflows/workflow.yml +++ b/.github/workflows/workflow.yml @@ -1,18 +1,57 @@ --- -name: pypi_publish -on: - push: - tags: - - '**' - workflow_dispatch: - tags: - - '**' +name: Upload Python Package + +on: workflow_dispatch + + +permissions: + contents: read + jobs: - build: + release-build: runs-on: ubuntu-latest + steps: - - uses: actions/checkout@v2 - - name: Build and publish to pypi - uses: JRubics/poetry-publish@v1.16 + - uses: actions/checkout@v4 + + - uses: actions/setup-python@v5 with: - pypi_token: ${{ secrets.PYPI_TOKEN }} \ No newline at end of file + python-version: "3.x" + + - name: Build release distributions + run: | + # NOTE: put your own distribution build steps here. + python -m pip install build + python -m build + + - name: Upload distributions + uses: actions/upload-artifact@v4 + with: + name: release-dists + path: dist/ + + pypi-publish: + runs-on: ubuntu-latest + + needs: + - release-build + + permissions: + # IMPORTANT: this permission is mandatory for trusted publishing + id-token: write + + # Dedicated environments with protections for publishing are strongly recommended. + environment: + name: pypi + # OPTIONAL: uncomment and update to include your PyPI project URL in the deployment status: + # url: https://pypi.org/p/YOURPROJECT + + steps: + - name: Retrieve release distributions + uses: actions/download-artifact@v4 + with: + name: release-dists + path: dist/ + + - name: Publish release distributions to PyPI + uses: pypa/gh-action-pypi-publish@release/v1