Update publish.yml

.github/workflows/publish.yml

@@ -32,7 +32,8 @@ jobs:
   publish-to-testpypi:
     name: Publish distribution to TestPyPI
     needs:
-    - build
+      - build
+    if: startsWith(github.ref, 'refs/tags/')
     runs-on: ubuntu-latest
 
     env:
@@ -57,9 +58,10 @@ jobs:
   publish-to-pypi:
     name: >-
       Publish distribution
-    if: startsWith(github.ref, 'refs/tags/')
     needs:
-    - build
+      - publish-to-testpypi
+      - build
+    if: startsWith(github.ref, 'refs/tags/')
     runs-on: ubuntu-latest
     env:
       name: publish-to-pypi
@@ -77,43 +79,3 @@ jobs:
       uses: pypa/gh-action-pypi-publish@release/v1
       with:
         password: ${{ secrets.PYPI_API_TOKEN }}
-
-  github-release:
-    name: >-
-      Sign the distribution
-      and upload them to GitHub Release
-    needs:
-    - publish-to-pypi
-    runs-on: ubuntu-latest
-
-    permissions:
-      contents: write
-      id-token: write
-
-    steps:
-    - name: Download all the dists
-      uses: actions/download-artifact@v3
-      with:
-        name: python-package-distributions
-        path: dist/
-    - name: Sign the dists with Sigstore
-      uses: sigstore/gh-action-sigstore-python@v1.2.3
-      with:
-        inputs: >-
-          ./dist/*.tar.gz
-          ./dist/*.whl
-    - name: Create GitHub Release
-      env:
-        GITHUB_TOKEN: ${{ github.token }}
-      run: >-
-        gh release create
-        '${{ github.ref_name }}'
-        --repo '${{ github.repository }}'
-        --notes ""
-    - name: Upload artifact signatures to GitHub Release
-      env:
-        GITHUB_TOKEN: ${{ github.token }}
-      run: >-
-        gh release upload
-        '${{ github.ref_name }}' dist/**
-        --repo '${{ github.repository }}'