Only create PyPI digital attestations (PEP 740) (#165)

hugovk · Jan 29, 2025 · 8da45e4 · 8da45e4
2 parents e939829 + 69313af
commit 8da45e4
Showing 1 changed file with 0 additions and 12 deletions.
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
@@ -41,7 +41,6 @@ jobs:
     needs: build-package
 
     permissions:
-      attestations: write
       id-token: write
 
     steps:
@@ -51,11 +50,6 @@ jobs:
           name: Packages
           path: dist
 
-      - name: Attest build provenance
-        uses: actions/attest-build-provenance@v2
-        with:
-          subject-path: "dist/*"
-
       - name: Upload package to Test PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
@@ -71,7 +65,6 @@ jobs:
     needs: build-package
 
     permissions:
-      attestations: write
       id-token: write
 
     steps:
@@ -81,10 +74,5 @@ jobs:
           name: Packages
           path: dist
 
-      - name: Attest build provenance
-        uses: actions/attest-build-provenance@v2
-        with:
-          subject-path: "dist/*"
-
       - name: Upload package to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1