Files
Mobile-Security-Framework-M…/.github/workflows/python-publish.yml
T
Ajin AbrahamandCursor 3f48c5deb5 ci: publish to PyPI with OIDC Trusted Publishing (#2646)
* ci: publish to PyPI with OIDC Trusted Publishing

Replace the long-lived PYPI_PASSWORD token with GitHub Actions OIDC
and pypa/gh-action-pypi-publish on release publish events.

Co-authored-by: Cursor <[email protected]>

* ci: drop inline comment on id-token permission

Co-authored-by: Cursor <[email protected]>

---------

Co-authored-by: Cursor <[email protected]>
2026-08-09 23:14:01 -07:00

31 lines
637 B
YAML

name: Upload Python Package
on:
release:
types: [published]
permissions:
contents: read
jobs:
deploy:
runs-on: ubuntu-latest
permissions:
id-token: write
contents: read
steps:
- uses: actions/checkout@v7
- name: Set up Python
uses: actions/setup-python@v7
with:
python-version: '3.x'
- name: Install Poetry
run: |
python -m pip install --upgrade pip
pip install poetry==1.8.4
- name: Build package
run: poetry build
- name: Publish to PyPI
uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2