publish #2

	# This workflow uses actions that are not certified by GitHub.
	# They are provided by a third-party and are governed by
	# separate terms of service, privacy policy, and support
	# documentation.

	# GitHub recommends pinning actions to a commit SHA.
	# To get a newer version, you will need to update the SHA.
	# You can also reference a tag or branch, but the action may change without warning.

	name: publish

	on:
	workflow_dispatch:
	inputs:
	release-tag:
	type: string
	required: true
	description: Git tag of the istribution to be published
	jobs:
	publish-to-pypi:
	name: Publish to PyPI
	runs-on: ubuntu-latest

	environment:
	name: pypi
	url: https://pypi.org/p/compliance-to-policy

	permissions:
	id-token: write # IMPORTANT: mandatory for trusted publishing

	steps:
	- name: Download the distributions from release
	run: gh release download ${{ github.event.inputs.release-tag }} -D dist -p '.tar.gz' -p '.whl'
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	GH_REPO: ${{ github.REPOSITORY }}
	- name: Publish distribution 📦 to PyPI
	uses: pypa/gh-action-pypi-publish@release/v1

Provide feedback