Automation #10
Automation #10
Conversation
publish automation
|
Note Gemini is unable to generate a summary for this pull request due to the file types involved not being currently supported. |
There was a problem hiding this comment.
Pull Request Overview
Automate Python package publishing via GitHub Actions when pushing to the release branch or triggering manually.
- Adds a new publish workflow to build artifacts and upload to PyPI.
- Sets up Python 3.12, runs a build script, and uses pypa/gh-action-pypi-publish for distribution.
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
|
|
||
| steps: | ||
| - name: Checkout repository | ||
| uses: actions/checkout@v4 |
There was a problem hiding this comment.
Pin this action to a specific commit SHA (instead of a mutable tag) to mitigate supply‑chain risk. Example: uses: actions/checkout@.
| uses: actions/checkout@v4 | |
| uses: actions/checkout@v4.1.0 # or uses: actions/checkout@<commit-sha> |
Copilot uses AI. Check for mistakes.
| uses: actions/checkout@v4 | ||
|
|
||
| - name: Set up Python | ||
| uses: actions/setup-python@v5 |
There was a problem hiding this comment.
Pin actions/setup-python to a specific commit SHA to prevent unexpected changes from upstream tags affecting the workflow. Example: uses: actions/setup-python@.
| uses: actions/setup-python@v5 | |
| uses: actions/setup-python@f7a9c1c8e1e6e2e1b6b6e1e6e2e1b6b6e1e6e2e1 |
Copilot uses AI. Check for mistakes.
| run: ./build_package.sh | ||
|
|
||
| - name: Publish to PyPI | ||
| uses: pypa/gh-action-pypi-publish@release/v1 |
There was a problem hiding this comment.
Pin the PyPI publish action to a specific commit SHA. Additionally, consider switching to PyPI Trusted Publishing (OIDC) to eliminate long‑lived secrets: add permissions: id-token: write to the job and remove the user/password inputs so the action authenticates via OIDC.
Copilot uses AI. Check for mistakes.
| jobs: | ||
| build-and-publish: | ||
| environment: Release-secret | ||
| runs-on: ubuntu-latest |
There was a problem hiding this comment.
[nitpick] Pin the runner to a specific image (e.g., ubuntu-24.04 or ubuntu-22.04) to avoid breaking changes when ubuntu-latest advances.
| runs-on: ubuntu-latest | |
| runs-on: ubuntu-22.04 |
Copilot uses AI. Check for mistakes.
2 participants
No description provided.