Skip to content

Switch to trusted publisher workflow to publish builds#67

Merged
jkanche merged 2 commits intomasterfrom
fix-actions
May 5, 2025
Merged

Switch to trusted publisher workflow to publish builds#67
jkanche merged 2 commits intomasterfrom
fix-actions

Conversation

@jkanche
Copy link
Copy Markdown
Member

@jkanche jkanche commented May 5, 2025

No description provided.

@jkanche jkanche self-assigned this May 5, 2025
Comment thread .github/workflows/publish-pypi.yml Fixed
password: ${{ secrets.PYPI_PASSWORD }}
# This uses the trusted publisher workflow so no token is required.
- name: Publish to PyPI
uses: pypa/gh-action-pypi-publish@release/v1

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Publish to PyPI' step
Uses Step
uses 'pypa/gh-action-pypi-publish' with ref 'release/v1', not a pinned commit hash
@jkanche jkanche merged commit bc8c53b into master May 5, 2025
9 checks passed
@jkanche jkanche deleted the fix-actions branch May 5, 2025 16:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants