semantic release

.github/workflows/python-ci.yml

@@ -1,16 +1,12 @@
 name: Python-CI
 
 on:
- push:
- branches:
- - master
- - develop
- - feature/*
  pull_request:
  branches:
  - master
  - develop
  - feature/*
+ workflow_dispatch:
 
 jobs:
  build:

.github/workflows/python-pypi.yml

@@ -5,6 +5,8 @@ on:
  branches:
  - master
 
+ workflow_dispatch:
+
 jobs:
  build:
  name: Build distribution 📦
@@ -29,6 +31,7 @@ jobs:
  with:
  name: python-package-distributions
  path: dist/
+
  publish-to-pypi:
  name: >-
  Publish Python 🐍 distribution 📦 to PyPI
@@ -38,9 +41,10 @@ jobs:
  runs-on: ubuntu-latest
  environment:
  name: pypi
- url: https://pypi.org/p/mirtorch # Replace <package-name> with your PyPI project name
+ url: https://pypi.org/p/<package-name> # Replace <package-name> with your PyPI project name
  permissions:
  id-token: write # IMPORTANT: mandatory for trusted publishing
+
  steps:
  - name: Download all the dists
  uses: actions/download-artifact@v3
@@ -49,3 +53,46 @@ jobs:
  path: dist/
  - name: Publish distribution 📦 to PyPI
  uses: pypa/gh-action-pypi-publish@release/v1
+
+ github-release:
+ name: >-
+ Sign the Python 🐍 distribution 📦 with Sigstore
+ and upload them to GitHub Release
+ needs:
+ - publish-to-pypi
+ runs-on: ubuntu-latest
+
+ permissions:
+ contents: write # IMPORTANT: mandatory for making GitHub Releases
+ id-token: write # IMPORTANT: mandatory for sigstore
+
+ steps:
+ - name: Download all the dists
+ uses: actions/download-artifact@v3
+ with:
+ name: python-package-distributions
+ path: dist/
+ - name: Sign the dists with Sigstore
+ uses: sigstore/gh-action-sigstore-python@v2.1.1
+ with:
+ inputs: >-
+ ./dist/*.tar.gz
+ ./dist/*.whl
+ - name: Create GitHub Release
+ env:
+ GITHUB_TOKEN: ${{ github.token }}
+ run: >-
+ gh release create
+ '${{ github.ref_name }}'
+ --repo '${{ github.repository }}'
+ --notes ""
+ - name: Upload artifact signatures to GitHub Release
+ env:
+ GITHUB_TOKEN: ${{ github.token }}
+ # Upload to GitHub Release using the `gh` CLI.
+ # `dist/` contains the built packages, and the
+ # sigstore-produced signatures and certificates.
+ run: >-
+ gh release upload
+ '${{ github.ref_name }}' dist/**
+ --repo '${{ github.repository }}'

.github/workflows/python-release.yml

@@ -5,6 +5,8 @@ on:
  branches:
  - master
 
+ workflow_dispatch:
+
 jobs:
  release:
  runs-on: ubuntu-latest