Sign with sigstore

Signed-off-by: Christian Heimes <[email protected]>
instructlab · Apr 25, 2024 · 63ac34e · 63ac34e
1 parent e31000d
commit 63ac34e
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.github/workflows/pypi.yaml b/.github/workflows/pypi.yaml
@@ -76,5 +76,12 @@ jobs:
                   name: Packages
                   path: dist
 
+            - uses: sigstore/[email protected]
+              with:
+                  upload-signing-artifact: true
+                  inputs: >-
+                      ./dist/*.tar.gz
+                      ./dist/*.whl
+
             - name: Upload to PyPI
               uses: pypa/gh-action-pypi-publish@release/v1