1.0.2 #8


	name: Release to Github

	on:
	release:
	types: [published]
	workflow_dispatch:

	jobs:
	build:
	uses: ./.github/workflows/build.yml

	github-release:
	name: Upload them to GitHub Release
	if: startsWith(github.ref, 'refs/tags/')
	needs: build
	runs-on: ubuntu-latest
	permissions:
	contents: write # IMPORTANT: mandatory for making GitHub Releases
	id-token: write # IMPORTANT: mandatory for sigstore
	steps:
	- uses: actions/checkout@v4

	- name: Download all the dists
	uses: actions/download-artifact@v3
	with:
	name: python-package-distributions
	path: dist/

	- name: Sign the dists with Sigstore
	uses: sigstore/[email protected]
	with:
	inputs: >-
	./dist/*.tar.gz
	./dist/*.whl

	# - name: Create GitHub Release
	# env:
	# GITHUB_TOKEN: ${{ github.token }}
	# run: >-
	# gh release
	# create '${{ github.ref_name }}'
	# --repo '${{ github.repository }}'
	# --notes ""

	- name: Upload artifact signatures to GitHub Release
	env:
	GITHUB_TOKEN: ${{ github.token }}
	# Upload to GitHub Release using the `gh` CLI.
	# `dist/` contains the built packages, and the
	# sigstore-produced signatures and certificates.
	run: >-
	gh release
	upload '${{ github.ref_name }}' dist/**
	--repo '${{ github.repository }}'

Provide feedback