Skip to content

feat: D35 — PyPI publish via Trusted Publisher#28

Open
ogkranthi wants to merge 1 commit into
mainfrom
agent/dev/D35
Open

feat: D35 — PyPI publish via Trusted Publisher#28
ogkranthi wants to merge 1 commit into
mainfrom
agent/dev/D35

Conversation

@ogkranthi
Copy link
Copy Markdown
Owner

Summary

  • Replaces twine+API token publish with PyPI Trusted Publisher (OIDC)
  • Triggers on v* tag push instead of release event
  • Separate build job (uploads artifact) and publish job (uses pypa/gh-action-pypi-publish@release/v1)
  • Enables attestations for supply chain security

Test plan

  • Verify workflow YAML is valid (actionlint)
  • Configure Trusted Publisher on PyPI for this repo
  • Test with a v0.5.0 tag push

Resolves D35.

🤖 Generated with Claude Code

Replaces twine+secret with pypa/gh-action-pypi-publish using OIDC
trusted publisher. Triggers on v* tag push with separate build and
publish jobs. CI workflow already exists and is unchanged.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@cloudflare-workers-and-pages
Copy link
Copy Markdown

Deploying agentshift with  Cloudflare Pages  Cloudflare Pages

Latest commit: d1c1ee7
Status: ✅  Deploy successful!
Preview URL: https://b0d84a1c.agentshift.pages.dev
Branch Preview URL: https://agent-dev-d35.agentshift.pages.dev

View logs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant