feat: release sinistral cli on tag/release

.github/workflows/release.yaml

@@ -0,0 +1,83 @@
+name: Publish Python distribution to PyPI
+
+on: push
+
+jobs:
+ build:
+ name: Build distribution
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@v4
+ - name: Set up Python
+ uses: actions/setup-python@v4
+ with:
+ python-version: "3.10"
+ - name: Install and configure Poetry
+ uses: snok/install-poetry@v1
+ with:
+ version: 1.5.1
+ - name: Build a binary wheel and a source tarball
+ run: poetry build
+ - name: Store the distribution packages
+ uses: actions/upload-artifact@v3
+ with:
+ name: python-package-distributions
+ path: dist/
+
+ publish-to-pypi:
+ name: >-
+ Publish Python distribution to PyPI
+ if: startsWith(github.ref, 'refs/tags/') # only publish to PyPI on tag pushes
+ needs:
+ - build
+ runs-on: ubuntu-latest
+ environment:
+ name: pypi
+ url: https://pypi.org/p/stacklet.client.sinistral
+ permissions:
+ id-token: write # IMPORTANT: mandatory for trusted publishing
+ steps:
+ - name: Download all the dists
+ uses: actions/download-artifact@v3
+ with:
+ name: python-package-distributions
+ path: dist/
+ - name: Publish distribution to PyPI
+ uses: pypa/gh-action-pypi-publish@release/v1
+ with:
+ skip-existing: true
+ verbose: true
+ print-hash: true
+
+ github-release:
+ name: >-
+ Sign the Python distribution with Sigstore
+ and upload to GitHub Release
+ needs:
+ - publish-to-pypi
+ runs-on: ubuntu-latest
+ permissions:
+ contents: write # IMPORTANT: mandatory for making GitHub Releases
+ id-token: write # IMPORTANT: mandatory for sigstore
+ steps:
+ - name: Download all the dists
+ uses: actions/download-artifact@v3
+ with:
+ name: python-package-distributions
+ path: dist/
+ - name: Sign the dists with Sigstore
+ uses: sigstore/gh-action-sigstore-python@v1.2.3
+ with:
+ inputs: >-
+ ./dist/*.tar.gz
+ ./dist/*.whl
+ - name: Upload artifact signatures to GitHub Release
+ env:
+ GITHUB_TOKEN: ${{ github.token }}
+ # Upload to GitHub Release using the `gh` CLI.
+ # `dist/` contains the built packages, and the
+ # sigstore-produced signatures and certificates.
+ run: >-
+ gh release create
+ '${{ github.ref_name }}' dist/**
+ --repo '${{ github.repository }}'

pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "stacklet.client.sinistral"
-version = "0.2.7"
+version = "0.2.8"
 description = "Sinistral CLI"
 authors = ["Sonny Shi <sonny@stacklet.io>"]
 maintainers = ["Stacklet <hello@stacklet.io>"]