Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Attest package provenance #12333

Merged
merged 5 commits into from
May 17, 2024
Merged

Attest package provenance #12333

merged 5 commits into from
May 17, 2024

Commits on May 16, 2024

  1. Attest package provenance 

    This uses the new build provenance support added in [build-and-inspect-python-package 2.5.0](https://github.com/hynek/build-and-inspect-python-package/blob/main/CHANGELOG.md#250---2024-05-13).

More information: https://github.blog/2024-05-02-introducing-artifact-attestations-now-in-public-beta/

Tested also in pytest-dev/pytest-mock#431.

Note: even though it is technically necessary only for the `deploy` workflow, as the `test` workflow does not publish its packages, decided to always attest the provenance in both cases to avoid any surprises related to this (say a misconfiguration) when deploying.
    @nicoddemus
    nicoddemus authored May 16, 2024
    Configuration menu
    Copy the full SHA
    2812a61 View commit details
    Browse the repository at this point in the history

  2. [pre-commit.ci] auto fixes from pre-commit.com hooks 

    for more information, see https://pre-commit.ci
    @pre-commit-ci
    pre-commit-ci[bot] committed May 16, 2024
    Configuration menu
    Copy the full SHA
    3fd5b86 View commit details
    Browse the repository at this point in the history

  3. Revert attestation from test.yml and add changelog

    @nicoddemus
    nicoddemus committed May 16, 2024
    Configuration menu
    Copy the full SHA
    e9b3402 View commit details
    Browse the repository at this point in the history

  4. Still update baipp to 2.5.0

    @nicoddemus
    nicoddemus committed May 16, 2024
    Configuration menu
    Copy the full SHA
    13172e8 View commit details
    Browse the repository at this point in the history

Commits on May 17, 2024

  1. Update changelog/12333.trivial.rst 

    Co-authored-by: Ran Benita <[email protected]>
    @nicoddemus @bluetech
    nicoddemus and bluetech authored May 17, 2024
    Configuration menu
    Copy the full SHA
    f0a84d3 View commit details
    Browse the repository at this point in the history