Skip to content

cicd: update release.yml to use trusted publisher (#279) #45

cicd: update release.yml to use trusted publisher (#279)

cicd: update release.yml to use trusted publisher (#279) #45

Workflow file for this run

name: Upload tagged commit to PyPI
on:
push:
tags:
- "*.*.**"
jobs:
get_branch:
runs-on: ubuntu-latest
outputs:
branch_name: ${{ steps.get_branch_name.outputs.name }}
steps:
- uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Get branch name
id: get_branch_name
run: |
raw=$(git branch -r --contains ${{ github.ref }})
branch=${raw##*/}
echo "::set-output name=name::$branch"
build:
name: Build distribution
runs-on: ubuntu-latest
needs: get_branch
if: needs.get_branch.outputs.branch_name == "0.8"

Check failure on line 25 in .github/workflows/release.yml

View workflow run for this annotation

GitHub Actions / Upload tagged commit to PyPI

Invalid workflow file

The workflow is not valid. .github/workflows/release.yml (Line: 25, Col: 9): Unexpected symbol: '"0'. Located at position 41 within expression: needs.get_branch.outputs.branch_name == "0.8"
steps:
- uses: actions/checkout@v4
- name: Set up Python
uses: actions/setup-python@v4
with:
python-version: "3.x"
- name: Update submodules
run: git submodule update --init --recursive
- name: Install pypa/build
run: >-
python3 -m
pip install
build
--user
- name: Build a binary wheel and a source tarball
run: python3 -m build
- name: Store the distribution packages
uses: actions/upload-artifact@v3
with:
name: python-package-distributions
path: dist/
publish-to-pypi:
name: >-
Publish Python distribution to PyPI
needs:
- build
runs-on: ubuntu-latest
environment:
name: pypi
url: https://pypi.org/p/ga4gh-vrs
permissions:
id-token: write # IMPORTANT: mandatory for trusted publishing
steps:
- name: Download all the dists
uses: actions/download-artifact@v3
with:
name: python-package-distributions
path: dist/
- name: Publish distribution to PyPI
uses: pypa/gh-action-pypi-publish@release/v1