Skip to content

Remove need for token based depoyment.#335

Merged
iMicknl merged 1 commit intomainfrom
enhancement/safe_release_with_oidc
Aug 9, 2024
Merged

Remove need for token based depoyment.#335
iMicknl merged 1 commit intomainfrom
enhancement/safe_release_with_oidc

Conversation

@iMicknl
Copy link
Copy Markdown
Owner

@iMicknl iMicknl commented Aug 9, 2024

This pull request includes several important changes to the GitHub Actions workflow for releases. The changes focus on configuring the environment, updating permissions, and improving the build and publish steps.

Workflow configuration:

Permissions:

Build and publish steps:

  • .github/workflows/release.yml: Split the build and publish steps into two separate actions. The build step now only builds the package distribution, and the publish step uses the pypa/gh-action-pypi-publish@release/v1 action to publish the package distributions to PyPI.

@github-actions github-actions bot added the enhancement New feature or request label Aug 9, 2024
@iMicknl iMicknl merged commit 3da2376 into main Aug 9, 2024
@iMicknl iMicknl deleted the enhancement/safe_release_with_oidc branch August 9, 2024 18:55
jsongerber pushed a commit to jsongerber/python-sagemcom-api that referenced this pull request Nov 8, 2024
This pull request includes several important changes to the GitHub
Actions workflow for releases. The changes focus on configuring the
environment, updating permissions, and improving the build and publish
steps.

### Workflow configuration:

*
[`.github/workflows/release.yml`](diffhunk://#diff-87db21a973eed4fef5f32b267aa60fcee5cbdf03c67fafdc2a9b553bb0b15f34R13-R17):
Added the `environment: release` setting to the `deploy` job to specify
the environment for the release.

### Permissions:

*
[`.github/workflows/release.yml`](diffhunk://#diff-87db21a973eed4fef5f32b267aa60fcee5cbdf03c67fafdc2a9b553bb0b15f34R13-R17):
Added `id-token: write` permission, which is mandatory for trusted
publishing.

### Build and publish steps:

*
[`.github/workflows/release.yml`](diffhunk://#diff-87db21a973eed4fef5f32b267aa60fcee5cbdf03c67fafdc2a9b553bb0b15f34L35-R44):
Split the build and publish steps into two separate actions. The build
step now only builds the package distribution, and the publish step uses
the `pypa/gh-action-pypi-publish@release/v1` action to publish the
package distributions to PyPI.
bakonyiferenc pushed a commit to bakonyiferenc/python-sagemcom-api that referenced this pull request Dec 16, 2025
This pull request includes several important changes to the GitHub
Actions workflow for releases. The changes focus on configuring the
environment, updating permissions, and improving the build and publish
steps.

### Workflow configuration:

*
[`.github/workflows/release.yml`](diffhunk://#diff-87db21a973eed4fef5f32b267aa60fcee5cbdf03c67fafdc2a9b553bb0b15f34R13-R17):
Added the `environment: release` setting to the `deploy` job to specify
the environment for the release.

### Permissions:

*
[`.github/workflows/release.yml`](diffhunk://#diff-87db21a973eed4fef5f32b267aa60fcee5cbdf03c67fafdc2a9b553bb0b15f34R13-R17):
Added `id-token: write` permission, which is mandatory for trusted
publishing.

### Build and publish steps:

*
[`.github/workflows/release.yml`](diffhunk://#diff-87db21a973eed4fef5f32b267aa60fcee5cbdf03c67fafdc2a9b553bb0b15f34L35-R44):
Split the build and publish steps into two separate actions. The build
step now only builds the package distribution, and the publish step uses
the `pypa/gh-action-pypi-publish@release/v1` action to publish the
package distributions to PyPI.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant