12 feat devsecops (#31)

* fix: added basic devsecops * fix: commit changes for publish process
unoplat · Jul 2, 2024 · 57cbdf3 · 57cbdf3
1 parent ad243e0
commit 57cbdf3
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 7 deletions.
diff --git a/.github/workflows/python_build.yaml b/.github/workflows/python_build.yaml
@@ -15,7 +15,8 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-          # c   
+          ref: ${{ GITHUB.HEAD_REF }}
+
       - name: Install python
         uses: actions/setup-python@v5
         with:
@@ -30,9 +31,6 @@ jobs:
         run: poetry install --no-root
       - name: Build poetry
         working-directory: unoplat-code-confluence
-        run: poetry build
-      # TODO: enable test when test are added  
-      # - name: Run tests
-      #   working-directory: unoplat-code-confluence
-      #   run: poetry run pytest
+        run: poetry build -f wheel
+
 
diff --git a/.github/workflows/python_publish_release_management.yaml b/.github/workflows/python_publish_release_management.yaml
@@ -58,6 +58,7 @@ jobs:
     permissions: 
       contents: read
       packages: write
+      id-token: write
     if: needs.main-pr-merge.outputs.release_created == 'true'
     strategy:
       matrix: ${{ fromJson(needs.main-pr-merge.outputs.matrix) }}
@@ -67,7 +68,14 @@ jobs:
         with:
           ref: main
           fetch-depth: 0
+
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          packages-dir: unoplat-code-confluence/dist
+
       - name: Publish package
         working-directory: ${{ matrix.path }}
         run: |
-          poetry publish  --build-wheel
+          poetry publish  --build-wheel
+