Skip to content

Conversation

@EpicWink
Copy link

This enables trusted publishing (with attestations). Workflow was split into build and deploy jobs (to minimise privileged token access).

Tasks a maintainer needs to do:

  • Configure a GitHub environment called pypi
  • Configure a trusted PyPI publisher for this GitHub repository and environment
  • (Optional) remove PYPI_PASSWORD GitHub project secret
  • (Optional) once this pull request is accepted, make a pre-release (eg 2025.12.1rc0) to test the configuration

Resolves #1866

This enables trusted publishing (with attestations). Workflow was split
into build and deploy jobs (to minimise privileged token access).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Switch to trusted publishing for package upload to PyPI in CI

1 participant