update

Signed-off-by: Andreas Fehlner <[email protected]>

.github/workflows/create_release.yml

@@ -138,6 +138,7 @@ jobs:
           merge-multiple: true
 
       - name: Publish distribution to PyPI
+        if: github.repository_owner == 'onnx'
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
           repository-url: https://test.pypi.org/legacy/
@@ -199,8 +200,7 @@ jobs:
 
     permissions:
       contents: write  # IMPORTANT: mandatory for making GitHub Releases
-      id-token: write  # IMPORTANT: mandatory for sigstore
-
+      id-token: write  # IMPORTANT: mandatory for sigstore     
 
     steps:
 
@@ -211,7 +211,7 @@ jobs:
           merge-multiple: true
 
       - name: Publish distribution to PyPI
-        if: github.repository_owner == 'onnx'
+        if: (github.repository_owner == 'onnx')
         uses: pypa/gh-action-pypi-publish@release/v1
         with:   
           repository-url: https://test.pypi.org/legacy/
@@ -227,7 +227,7 @@ jobs:
 
       # The Release is created by the Github GUI, we only add the files here
       - name: Upload artifact signatures to GitHub Release
-        if: startsWith(github.ref, 'refs/tags/')  # only publish to PyPI on tag pushes # TODO check exact variants
+        if:  startsWith(github.ref, 'refs/tags/')  # only publish to PyPI on tag pushes # TODO check exact variants
         env:
           GITHUB_TOKEN: ${{ github.token }}
         # Upload to GitHub Release using the `gh` CLI.
@@ -237,8 +237,7 @@ jobs:
           gh release upload
           '${{ github.ref_name }}' /home/runner/work/onnx/onnx/dist/**.sigstore.json
           --repo '${{ github.repository }}'  
-         
-    
-
+
+