Configure the project for trusted publishing of tagged commits.

jaraco · Feb 20, 2024 · 0d04831 · 0d04831
1 parent f7f423d
commit 0d04831
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 5 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -99,8 +99,11 @@ jobs:
         jobs: ${{ toJSON(needs) }}
 
   release:
+    environment:
+      release
     permissions:
       contents: write
+      id-token: write
     needs:
     - check
     if: github.event_name == 'push' && contains(github.ref, 'refs/tags/')
@@ -114,8 +117,7 @@ jobs:
           python-version: 3.x
       - name: Install tox
         run: python -m pip install tox
-      - name: Run
-        run: tox -e release
-        env:
-          TWINE_PASSWORD: ${{ secrets.PYPI_TOKEN }}
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Build
+        run: tox -e build
+      - name: Publish
+        uses: pypa/gh-action-pypi-publish@release/v1
diff --git a/tox.ini b/tox.ini
@@ -28,3 +28,17 @@ commands =
   python -m docutils docs/FAQ.rst
   python -m docutils docs/INSTALLATION.rst
   python -m docutils docs/TODO.rst
+
+
+[testenv:build]
+description = build the package and create release in GitHub
+skip_install = True
+deps =
+  build
+  jaraco.develop>=7.1
+pass_env =
+  GITHUB_TOKEN
+commands =
+  python -c "import shutil; shutil.rmtree('dist', ignore_errors=True)"
+  python -m build
+  python -m jaraco.develop.create-github-release