build: sign artifacts with sigstore

nedbat · May 15, 2023 · b97e634 · b97e634
1 parent 610a56f
commit b97e634
Showing 1 changed file with 24 additions and 0 deletions.
diff --git a/.github/workflows/kit.yml b/.github/workflows/kit.yml
@@ -241,3 +241,27 @@ jobs:
         with:
           name: dist
           path: dist/*.whl
+
+  sign:
+    name: "Sign artifacts"
+    needs:
+      - wheels
+      - sdist
+      - pypy
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+    steps:
+      - name: "Download artifacts"
+        uses: actions/download-artifact@v3
+        with:
+          name: dist
+
+      - name: "What did we get?"
+        run: |
+          ls -alR
+
+      - name: "Sign"
+        uses: sigstore/gh-action-sigstore-python@v1.2.3
+        with:
+          inputs: *