update workflow- only run on new tag, use newest gh sigstore action

mediacloud · May 7, 2024 · e9b4462 · e9b4462
1 parent d5d8c52
commit e9b4462
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/.github/workflows/publish-to-pypi.yml b/.github/workflows/publish-to-pypi.yml
@@ -1,6 +1,9 @@
 name: Publish Python 🐍 distribution 📦 to PyPI and TestPyPI
 
-on: push
+on: 
+  push:
+    tags: 
+      - "*"
 
 jobs:
   build:
@@ -68,7 +71,7 @@ jobs:
         name: python-package-distributions
         path: dist/
     - name: Sign the dists with Sigstore
-      uses: sigstore/gh-action-sigstore-python@v1.2.3
+      uses: sigstore/gh-action-sigstore-python@v2.1.1
       with:
         inputs: >-
           ./dist/*.tar.gz