diff --git a/.github/workflows/release_publish.yml b/.github/workflows/release_publish.yml index a980a96..b956377 100644 --- a/.github/workflows/release_publish.yml +++ b/.github/workflows/release_publish.yml @@ -16,6 +16,32 @@ jobs: name: Publish Release permissions: id-token: write - contents: read + contents: write uses: aws-deadline/.github/.github/workflows/reusable_publish.yml@mainline secrets: inherit + # PyPI does not support reusable workflows yet + # # See https://github.com/pypi/warehouse/issues/11096 + PublishToPyPI: + needs: Publish + runs-on: ubuntu-latest + environment: release + permissions: + id-token: write + steps: + - name: Checkout + uses: actions/checkout@v4 + with: + ref: release + fetch-depth: 0 + - name: Set up Python + uses: actions/setup-python@v5 + with: + python-version: '3.9' + - name: Install dependencies + run: | + pip install --upgrade hatch + - name: Build + run: hatch -v build + # # See https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-pypi + - name: Publish to PyPI + uses: pypa/gh-action-pypi-publish@release/v1