From 80bc19c7b5cf141396ea8ee94450e76631bbad5a Mon Sep 17 00:00:00 2001 From: LilSpazJoekp <15524072+LilSpazJoekp@users.noreply.github.com> Date: Sun, 1 Oct 2023 16:50:51 -0500 Subject: [PATCH] Trusted publishing can't be a reusable workflow --- .github/workflows/pypi.yml | 27 ++++++++++++++++++++------- 1 file changed, 20 insertions(+), 7 deletions(-) diff --git a/.github/workflows/pypi.yml b/.github/workflows/pypi.yml index 8c2fdd8..43521cf 100644 --- a/.github/workflows/pypi.yml +++ b/.github/workflows/pypi.yml @@ -1,12 +1,25 @@ jobs: pypi-publish: - name: Publish Python Package - secrets: inherit - uses: praw-dev/.github/.github/workflows/pypi.yml@main -name: Publish Python Package + environment: release + name: Upload release to PyPI + permissions: + id-token: write + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v2 + - name: Set up Python + uses: actions/setup-python@v2 + with: + python-version: '3.x' + - name: Install dependencies + run: | + python -m pip install --upgrade pip + pip install build + - name: Build package + run: python -m build + - name: Publish package distributions to PyPI + uses: pypa/gh-action-pypi-publish@release/v1 +name: Upload Python Package on: release: types: [ published ] -permissions: - contents: read - id-token: write