Skip to content

Code Factory v0.17.1 - Trusted Publishing Proof

Choose a tag to compare

View all tags
@zrk222 zrk222 released this 17 Jul 19:43
v0.17.1
090d3ad
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Code Factory v0.17.1

Supply-chain hardening release proving the package delivery path introduced in PR #4.

  • PyPI Trusted Publishing via GitHub OIDC; no stored PyPI token
  • protected pypi deployment environment
  • validation and privileged publishing split into separate jobs
  • immutable artifact handoff from validation to deployment
  • PyPI provenance attestations enabled
  • PR package contract builds, checks, clean-installs, and exercises the wheel
  • 60-second exact-UI quick start and matching cover attached as release assets

Watch or download the 60-second quick start

Validation before release: 190 tests passed; wheel and sdist passed Twine checks.

Assets 16
Loading