disable pypi attestations, pin gh-upload action version

open-atmos · Nov 13, 2024 · e2f777b · e2f777b
1 parent b63f69e
commit e2f777b
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/.github/workflows/tests+pypi.yml b/.github/workflows/tests+pypi.yml
@@ -261,15 +261,17 @@ jobs:
           path: dist
 
       - if: github.event_name == 'push' && github.ref == 'refs/heads/main'
-        uses: pypa/gh-action-pypi-publish@unstable/v1
+        uses: pypa/gh-action-pypi-publish@release/v1.12
         with:
           password: ${{ secrets.TEST_PYPI_API_TOKEN }}
           repository_url: https://test.pypi.org/legacy/
+          attestations: false
 
       - if: startsWith(github.ref, 'refs/tags')
-        uses: pypa/gh-action-pypi-publish@unstable/v1
+        uses: pypa/gh-action-pypi-publish@release/v1.12
         with:
           password: ${{ secrets.PYPI_API_TOKEN }}
+          attestations: false
 
   devops_tests:
     runs-on: ubuntu-latest