fix pypi

.github/workflows/python-pypi.yml

@@ -31,6 +31,7 @@ jobs:
  with:
  name: python-package-distributions
  path: dist/
+
  publish-to-pypi:
  name: >-
  Publish Python 🐍 distribution 📦 to PyPI
@@ -40,9 +41,10 @@ jobs:
  runs-on: ubuntu-latest
  environment:
  name: pypi
- url: https://pypi.org/p/mirtorch # Replace <package-name> with your PyPI project name
+ url: https://pypi.org/p/<package-name> # Replace <package-name> with your PyPI project name
  permissions:
  id-token: write # IMPORTANT: mandatory for trusted publishing
+
  steps:
  - name: Download all the dists
  uses: actions/download-artifact@v3
@@ -51,3 +53,46 @@ jobs:
  path: dist/
  - name: Publish distribution 📦 to PyPI
  uses: pypa/gh-action-pypi-publish@release/v1
+
+ github-release:
+ name: >-
+ Sign the Python 🐍 distribution 📦 with Sigstore
+ and upload them to GitHub Release
+ needs:
+ - publish-to-pypi
+ runs-on: ubuntu-latest
+
+ permissions:
+ contents: write # IMPORTANT: mandatory for making GitHub Releases
+ id-token: write # IMPORTANT: mandatory for sigstore
+
+ steps:
+ - name: Download all the dists
+ uses: actions/download-artifact@v3
+ with:
+ name: python-package-distributions
+ path: dist/
+ - name: Sign the dists with Sigstore
+ uses: sigstore/gh-action-sigstore-python@v2.1.1
+ with:
+ inputs: >-
+ ./dist/*.tar.gz
+ ./dist/*.whl
+ - name: Create GitHub Release
+ env:
+ GITHUB_TOKEN: ${{ github.token }}
+ run: >-
+ gh release create
+ '${{ github.ref_name }}'
+ --repo '${{ github.repository }}'
+ --notes ""
+ - name: Upload artifact signatures to GitHub Release
+ env:
+ GITHUB_TOKEN: ${{ github.token }}
+ # Upload to GitHub Release using the `gh` CLI.
+ # `dist/` contains the built packages, and the
+ # sigstore-produced signatures and certificates.
+ run: >-
+ gh release upload
+ '${{ github.ref_name }}' dist/**
+ --repo '${{ github.repository }}'