actions
/
gh-action-pypi-publish
Template
mirror of https://github.com/pypa/gh-action-pypi-publish
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Give more information to users 

Reusable workflows don't work, and it's challenging to know that. Help the user out.
This commit is contained in:
Dustin Spicuzza 2023-10-23 04:00:32 -04:00 committed by Sviatoslav Sydorenko (Святослав Сидоренко)
parent c12cc61414
commit a1a49954d3
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
README.md
View File

@ -25,6 +25,9 @@ tag, or opt-in to [use a full Git commit SHA] and Dependabot.
### Trusted publishing ### Trusted publishing
> [!NOTE] Trusted publishing does not support reusable workflows at this time,
> please use a username/token instead.
> [!NOTE] > [!NOTE]
> Trusted publishing is sometimes referred to by its > Trusted publishing is sometimes referred to by its
> underlying technology -- OpenID Connect, or OIDC for short. > underlying technology -- OpenID Connect, or OIDC for short.

3
oidc-exchange.py
View File

@ -71,6 +71,9 @@ If a claim is not present in the claim set, then it is rendered as `MISSING`.
* `repository_owner_id`: `{repository_owner_id}` * `repository_owner_id`: `{repository_owner_id}`
* `job_workflow_ref`: `{job_workflow_ref}` * `job_workflow_ref`: `{job_workflow_ref}`
* `ref`: `{ref}` * `ref`: `{ref}`
See https://docs.pypi.org/trusted-publishers/troubleshooting/ for more help
""" """
# Rendered if the package index's token response isn't valid JSON. # Rendered if the package index's token response isn't valid JSON.