Similar to #99 for GO feeds (#199) #132

	name: Upload vdb Python Package

	on:
	push:
	tags:
	- 'v' # Push events to matching v, i.e. v1.0, v20.15.10


	jobs:
	deploy:

	runs-on: ubuntu-latest
	permissions:
	contents: write
	packages: write
	id-token: write
	steps:
	- uses: actions/checkout@v4
	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: '3.12'
	- name: Use Node.js
	uses: actions/setup-node@v4
	with:
	node-version: '22.x'
	- name: Set up JDK
	uses: actions/setup-java@v4
	with:
	distribution: 'temurin'
	java-version: '21'
	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install setuptools wheel twine build
	- name: Build
	run: \|
	python3 -m build
	- name: Publish package distributions to PyPI
	if: startsWith(github.ref, 'refs/tags/')
	uses: pypa/gh-action-pypi-publish@release/v1
	- name: Generate SBOM with cdxgen
	run: \|
	npm install -g @cyclonedx/cdxgen
	cdxgen -t python -o bom.json . --profile research
	- name: Create Release
	id: create_release
	if: startsWith(github.ref, 'refs/tags/')
	uses: softprops/action-gh-release@v2
	with:
	files: \|
	bom.json
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback