ci: Add GitHub artifact attestations to package distribution (#933)

scikit-hep · May 23, 2024 · 075b53f · 075b53f
1 parent 12de859
commit 075b53f
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/.github/workflows/wheels.yml b/.github/workflows/wheels.yml
@@ -138,6 +138,8 @@ jobs:
       url: https://pypi.org/p/boost-histogram
     permissions:
       id-token: write
+      attestations: write
+      contents: read
 
     steps:
       - uses: actions/download-artifact@v4
@@ -149,4 +151,9 @@ jobs:
       - name: List all files
         run: ls -lh dist
 
+      - name: Generate artifact attestation for sdist and wheels
+        uses: actions/attest-build-provenance@173725a1209d09b31f9d30a3890cf2757ebbff0d # v1.1.2
+        with:
+          subject-path: "dist/boost_histogram-*"
+
       - uses: pypa/gh-action-pypi-publish@release/v1
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -91,7 +91,7 @@ repos:
       - id: rst-inline-touching-normal
 
   - repo: https://github.com/python-jsonschema/check-jsonschema
-    rev: 0.28.2
+    rev: 0.28.4
     hooks:
       - id: check-readthedocs
       - id: check-github-workflows