New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ci: Add GitHub artifact attestations to package distribution #1222

Merged

jpivarski merged 1 commit into scikit-hep:main from matthewfeickert:ci/add-artifact-attestations

May 22, 2024

Member

matthewfeickert commented May 21, 2024

Add generation of GitHub artifact attestations to built sdist and wheel before upload. c.f.:
- https://github.blog/2024-05-02-introducing-artifact-attestations-now-in-public-beta/
- https://docs.github.com/en/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds

matthewfeickert requested a review from jpivarski

May 21, 2024 22:02

matthewfeickert self-assigned this


          ci: Add GitHub artifact attestations to package distribution

0e1d3be

* Add generation of GitHub artifact attestations to built sdist and wheel before upload. c.f.:
   - https://github.blog/2024-05-02-introducing-artifact-attestations-now-in-public-beta/
   - https://docs.github.com/en/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds

matthewfeickert force-pushed the ci/add-artifact-attestations branch from 5d1da40 to 0e1d3be Compare

May 21, 2024 22:06

jpivarski approved these changes

View reviewed changes

Member

jpivarski left a comment

Looks good; thanks! I'll merge this now, because it looks like a straightforward addition (no pending updates).

jpivarski merged commit d38f72a into scikit-hep:main

24 checks passed

jpivarski mentioned this pull request

ci: Add GitHub artifact attestations to package distribution scikit-hep/awkward#3126

Merged

matthewfeickert deleted the ci/add-artifact-attestations branch

May 22, 2024 04:40

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet