New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CI: Add GitHub artifact attestations to package distribution #7459

Merged

MridulS merged 1 commit into networkx:main from matthewfeickert:ci/add-artifact-attestations

Jun 3, 2024

Contributor

matthewfeickert commented May 22, 2024 •

edited

Loading

Add generation of GitHub artifact attestations to built sdist and wheel before upload. c.f.:
- https://github.blog/2024-05-02-introducing-artifact-attestations-now-in-public-beta/
- https://docs.github.com/en/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds

This PR is related to scientific-python/summit-2024#9 so cc @MridulS and @jarrodmillman for review.


          CI: Add GitHub artifact attestations to package distribution

e1cb118

* Add generation of GitHub artifact attestations to built sdist and wheel
  before upload.
  c.f.:
   - https://github.blog/2024-05-02-introducing-artifact-attestations-now-in-public-beta/
   - https://docs.github.com/en/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds

rossbar added the type: Maintenance label

jarrodmillman approved these changes

View reviewed changes

MridulS merged commit fc9f169 into networkx:main

42 of 43 checks passed

jarrodmillman added this to the 3.4 milestone

Peiffap pushed a commit to Peiffap/networkx that referenced this pull request


          CI: Add GitHub artifact attestations to package distribution (network…

8d6e711

…x#7459)

* Add generation of GitHub artifact attestations to built sdist and wheel
  before upload.
  c.f.:
   - https://github.blog/2024-05-02-introducing-artifact-attestations-now-in-public-beta/
   - https://docs.github.com/en/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment