diff --git a/.github/workflows/python-release.yml b/.github/workflows/python-release.yml index 1ea1291a..4c0a2371 100644 --- a/.github/workflows/python-release.yml +++ b/.github/workflows/python-release.yml @@ -33,19 +33,19 @@ jobs: run: pip install hatch - name: Build - run: cd tansu && hatch build + run: cd tansu && hatch build && mv dist ../. - name: Generate artifact attestation for sdist and wheels uses: actions/attest-build-provenance@5e9cb68e95676991667494a6a4e59b8a2f13e1d0 with: - subject-path: "tansu/dist/tansu*" + subject-path: "dist/tansu*" - name: Verify artifact attestation env: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} shell: bash run: | - for artifact in tansu/dist/*; do + for artifact in dist/*; do echo "# ${artifact}" gh attestation verify "${artifact}" --repo ${{ github.repository }} done