Publish Python 🐍 distribution 📦 to PyPI and build container

downcase IMAGE_NAME #9

Workflow file for this run

.github/workflows/publish_to_pypi_and_build_container.yml at 14f38a7

	name: 'Publish Python 🐍 distribution 📦 to PyPI and build container'

	on:
	push:
	tags:
	- '*'

	env:
	REGISTRY: ghcr.io
	# github.repository as <account>/<repo>
	IMAGE_NAME: ${{ github.repository }}

	jobs:
	build:
	name: Build distribution 📦
	#if: startsWith(github.ref, 'refs/tags/') # only publish to PyPI on tag pushes
	runs-on: ubuntu-latest

	steps:
	- name: Checkout repository
	uses: actions/checkout@v4
	with:
	submodules: 'true'
	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: "3.12"
	- name: Install pypa/build
	run: >-
	python3 -m
	pip install
	build
	--user
	- name: Build a binary wheel and a source tarball
	run: python3 -m build
	- name: Store the distribution packages
	uses: actions/upload-artifact@v4
	with:
	name: python-package-distributions
	path: dist/

	# publish-to-pypi:
	# name: >-
	# Publish Python 🐍 distribution 📦 to PyPI
	# if: startsWith(github.ref, 'refs/tags/') # only publish to PyPI on tag pushes
	# needs:
	# - build
	# runs-on: ubuntu-latest
	# environment:
	# name: pypi
	# url: https://pypi.org/p/${{ github.repository }} # Replace <package-name> with your PyPI project name
	# permissions:
	# id-token: write # IMPORTANT: mandatory for trusted publishing

	# steps:
	# - name: Download all the dists
	# uses: actions/download-artifact@v4
	# with:
	# name: python-package-distributions
	# path: dist/
	# - name: Publish distribution 📦 to PyPI
	# uses: pypa/gh-action-pypi-publish@release/v1

	github-release:
	name: >-
	Sign the Python 🐍 distribution 📦 with Sigstore
	and upload them to GitHub Release
	needs:
	- build
	runs-on: ubuntu-latest

	permissions:
	contents: write # IMPORTANT: mandatory for making GitHub Releases
	id-token: write # IMPORTANT: mandatory for sigstore

	steps:
	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: "3.12"
	- name: Download all the dists
	uses: actions/download-artifact@v4
	with:
	name: python-package-distributions
	path: dist/
	- name: Sign the dists with Sigstore
	uses: sigstore/gh-action-sigstore-python@v2.1.1
	with:
	inputs: >-
	./dist/*.tar.gz
	./dist/*.whl
	- name: Create GitHub Release
	env:
	GITHUB_TOKEN: ${{ github.token }}
	run: >-
	gh release create
	'${{ github.ref_name }}'
	--repo '${{ github.repository }}'
	--generate-notes
	- name: Upload artifact signatures to GitHub Release
	env:
	GITHUB_TOKEN: ${{ github.token }}
	# Upload to GitHub Release using the `gh` CLI.
	# `dist/` contains the built packages, and the
	# sigstore-produced signatures and certificates.
	run: >-
	gh release upload
	'${{ github.ref_name }}' dist/**
	--repo '${{ github.repository }}'

	build-container:
	name: Docker Image Publish
	runs-on: ubuntu-latest
	needs:
	- github-release

	permissions:
	contents: write
	packages: write

	steps:
	- name: Checkout repository
	uses: actions/checkout@v4
	with:
	submodules: 'true'

	- name: Install Cosign
	uses: sigstore/cosign-installer@v3.7.0

	# Workaround: https://github.com/docker/build-push-action/issues/461
	- name: Setup Docker buildx
	uses: docker/setup-buildx-action@v3

	# Login against a Docker registry except on PR
	# https://github.com/docker/login-action
	- name: Log into registry ${{ env.REGISTRY }}
	uses: docker/login-action@v3
	with:
	registry: ${{ env.REGISTRY }}
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}

	# Extract metadata (tags, labels) for Docker
	# https://github.com/docker/metadata-action
	- name: Extract Docker metadata
	id: meta
	uses: docker/metadata-action@v5
	with:
	images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
	tags: \|
	type=raw,value=latest,enable=false
	type=ref,event=tag,value=${{ github.ref_name }}

	# Build and push Docker image with Buildx (don't push on PR)
	# https://github.com/docker/build-push-action
	- name: Build and push Docker image
	id: build-and-push
	uses: docker/build-push-action@v5
	with:
	push: true
	tags: ${{ steps.meta.outputs.tags }}
	labels: ${{ steps.meta.outputs.labels }}

	- name: downcase IMAGE_NAME
	run: \|
	echo "IMG=${IMAGE_NAME@L}" >>${GITHUB_ENV}

	- name: Sign image with a key
	run: \|
	cosign sign --yes --key env://COSIGN_PRIVATE_KEY ${{ env.REGISTRY }}/${{ env.IMG }}:${{ github.ref_name }}
	env:
	COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}
	COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}


	# publish-to-testpypi:
	# name: Publish Python 🐍 distribution 📦 to TestPyPI
	# needs:
	# - build
	# runs-on: ubuntu-latest

	# environment:
	# name: testpypi
	# url: https://test.pypi.org/p/${{ github.repository }}

	# permissions:
	# id-token: write # IMPORTANT: mandatory for trusted publishing

	# steps:
	# - name: Download all the dists
	# uses: actions/download-artifact@v4
	# with:
	# name: python-package-distributions
	# path: dist/
	# - name: Publish distribution 📦 to TestPyPI
	# uses: pypa/gh-action-pypi-publish@release/v1
	# with:
	# repository-url: https://test.pypi.org/legacy/

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

downcase IMAGE_NAME #9

Workflow file

downcase IMAGE_NAME #9

Jobs

Run details

Workflow file for this run