During the migration of `axe-selenium-python` a [discussion](https://github.com/orgs/django-commons/discussions/283) was opened asking about details of the [sigtore action](https://github.com/sigstore/gh-action-sigstore-python) Upon review it was discoverd that the sigstore action states > [!IMPORTANT] > Are you publishing a package to PyPI? If so, you **do not need this action**: > [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) > will handle signing for you! Given this guidance, we should update [release.yml](https://github.com/django-commons/best-practices/blob/main/.github/workflows/release.yml) to reflect this change