diff --git a/.github/workflows/publish_to_pypi.yml b/.github/workflows/publish_to_pypi.yml index 88099a7..fcd133f 100644 --- a/.github/workflows/publish_to_pypi.yml +++ b/.github/workflows/publish_to_pypi.yml @@ -12,6 +12,7 @@ jobs: name: pypi url: https://pypi.org/p/FontCollector permissions: + contents: write id-token: write steps: - name: Checkout code @@ -23,12 +24,15 @@ jobs: python-version: '3.10' - name: "Install build" - run: >- - pip install build + run: pip install build - name: Build package - run: >- - python -m build + run: python -m build - name: Publish distribution to PyPI uses: pypa/gh-action-pypi-publish@release/v1 + + - name: Upload artifact signatures to GitHub Release + env: + GITHUB_TOKEN: ${{ github.token }} + run: gh release upload '${{ github.ref_name }}' dist/** --repo '${{ github.repository }}'