Merge pull request #122 from colindean/empty-token

This patch implements displaying a warning when the password
input passed in to the action is empty.
This commit is contained in:
Sviatoslav Sydorenko 2023-03-10 20:39:33 +01:00 committed by GitHub
commit 32b5e93709
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 19 additions and 9 deletions

View File

@ -23,6 +23,15 @@ if [[
! "$INPUT_PASSWORD" =~ ^pypi- ! "$INPUT_PASSWORD" =~ ^pypi-
]] ]]
then then
if [[ -z "$INPUT_PASSWORD" ]]; then
echo \
::warning file='# >>' PyPA publish to PyPI GHA'%3A' \
EMPTY TOKEN \
'<< ':: \
It looks like you have not passed a password or it \
is otherwise empty. Please verify that you have passed it \
directly or, preferably, through a secret.
else
echo \ echo \
::warning file='# >>' PyPA publish to PyPI GHA'%3A' \ ::warning file='# >>' PyPA publish to PyPI GHA'%3A' \
POTENTIALLY INVALID TOKEN \ POTENTIALLY INVALID TOKEN \
@ -33,6 +42,7 @@ then
cause an authentication error. Please verify that you have \ cause an authentication error. Please verify that you have \
copied your token properly if such an error occurs. copied your token properly if such an error occurs.
fi fi
fi
if ( ! ls -A ${INPUT_PACKAGES_DIR%%/}/*.tar.gz &> /dev/null && \ if ( ! ls -A ${INPUT_PACKAGES_DIR%%/}/*.tar.gz &> /dev/null && \
! ls -A ${INPUT_PACKAGES_DIR%%/}/*.whl &> /dev/null ) ! ls -A ${INPUT_PACKAGES_DIR%%/}/*.whl &> /dev/null )