Skip to content

Publish vulnerablecode to pypi using trusted publisher #2223

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
keshav-space merged 2 commits into from
Mar 18, 2026
+16 −14
Merged

Publish vulnerablecode to pypi using trusted publisher #2223

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
4498869
Publish vulnerablecode to pypi using trusted publisher
keshav-space Mar 18, 2026
64e41a5
Do not create GitHub release as draft
keshav-space Mar 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
30 changes: 16 additions & 14 deletions .github/workflows/pypi-release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,12 +21,12 @@ on:
jobs:
build-pypi-distribs:
name: Build and publish library to PyPI
runs-on: ubuntu-22.04
runs-on: ubuntu-24.04

steps:
- uses: actions/checkout@master
- uses: actions/checkout@v4
- name: Set up Python
uses: actions/setup-python@v1
uses: actions/setup-python@v5
with:
python-version: 3.12

Expand All @@ -37,7 +37,7 @@ jobs:
run: python -m build --sdist --wheel --outdir dist/

- name: Upload built archives
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: pypi_archives
path: dist/*
Expand All @@ -47,37 +47,39 @@ jobs:
name: Create GH release
needs:
- build-pypi-distribs
runs-on: ubuntu-22.04
runs-on: ubuntu-24.04

steps:
- name: Download built archives
uses: actions/download-artifact@v4
uses: actions/download-artifact@v8
with:
name: pypi_archives
path: dist

- name: Create GH release
uses: softprops/action-gh-release@v1
uses: softprops/action-gh-release@v2
with:
draft: true
draft: false
generate_release_notes: true
files: dist/*


create-pypi-release:
name: Create PyPI release
needs:
- create-gh-release
runs-on: ubuntu-22.04
runs-on: ubuntu-24.04
environment: pypi-publish
permissions:
id-token: write

steps:
- name: Download built archives
uses: actions/download-artifact@v4
uses: actions/download-artifact@v8
with:
name: pypi_archives
path: dist

- name: Publish to PyPI
if: startsWith(github.ref, 'refs/tags')
uses: pypa/gh-action-pypi-publish@master
with:
password: ${{ secrets.PYPI_API_TOKEN }}
if: startsWith(github.ref, 'refs/tags/')
uses: pypa/gh-action-pypi-publish@release/v1
Loading