From ca4fdeaa8eb04ff3bcd2ff6d186e3378d571ead5 Mon Sep 17 00:00:00 2001 From: Romain Komorn <136473744+romainkomorndatadog@users.noreply.github.com> Date: Thu, 1 Aug 2024 08:54:42 +0100 Subject: [PATCH] Delete .github/workflows/publish.yaml --- .github/workflows/publish.yaml | 73 ---------------------------------- 1 file changed, 73 deletions(-) delete mode 100644 .github/workflows/publish.yaml diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml deleted file mode 100644 index da891990aa..0000000000 --- a/.github/workflows/publish.yaml +++ /dev/null @@ -1,73 +0,0 @@ -name: Publish -on: - push: - tags: - - '*' -jobs: - build: - runs-on: ubuntu-latest - outputs: - hash: ${{ steps.hash.outputs.hash }} - steps: - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 - - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0 - with: - python-version: '3.x' - cache: pip - cache-dependency-path: requirements*/*.txt - - run: pip install -r requirements/build.txt - # Use the commit date instead of the current date during the build. - - run: echo "SOURCE_DATE_EPOCH=$(git log -1 --pretty=%ct)" >> $GITHUB_ENV - - run: python -m build - # Generate hashes used for provenance. - - name: generate hash - id: hash - run: cd dist && echo "hash=$(sha256sum * | base64 -w0)" >> $GITHUB_OUTPUT - - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3 - with: - path: ./dist - provenance: - needs: [build] - permissions: - actions: read - id-token: write - contents: write - # Can't pin with hash due to how this workflow works. - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0 - with: - base64-subjects: ${{ needs.build.outputs.hash }} - create-release: - # Upload the sdist, wheels, and provenance to a GitHub release. They remain - # available as build artifacts for a while as well. - needs: [provenance] - runs-on: ubuntu-latest - permissions: - contents: write - steps: - - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7 - - name: create release - run: > - gh release create --draft --repo ${{ github.repository }} - ${{ github.ref_name }} - *.intoto.jsonl/* artifact/* - env: - GH_TOKEN: ${{ github.token }} - publish-pypi: - needs: [provenance] - # Wait for approval before attempting to upload to PyPI. This allows reviewing the - # files in the draft release. - environment: - name: publish - url: https://pypi.org/project/Flask/${{ github.ref_name }} - runs-on: ubuntu-latest - permissions: - id-token: write - steps: - - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7 - - uses: pypa/gh-action-pypi-publish@81e9d935c883d0b210363ab89cf05f3894778450 # v1.8.14 - with: - repository-url: https://test.pypi.org/legacy/ - packages-dir: artifact/ - - uses: pypa/gh-action-pypi-publish@81e9d935c883d0b210363ab89cf05f3894778450 # v1.8.14 - with: - packages-dir: artifact/