actions
/
gh-action-pypi-publish
Template
mirror of https://github.com/pypa/gh-action-pypi-publish
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #186 from virtuald/virtuald-patch-1 

Mention in the docs that reusable workflows aren't supported right now
This commit is contained in:
Sviatoslav Sydorenko (Святослав Сидоренко) 2024-02-05 18:12:13 +01:00 committed by GitHub
parent e080e0073c 415d7a6bec
commit e82f99a47c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
README.md
View File

@ -25,6 +25,12 @@ tag, or opt-in to [use a full Git commit SHA] and Dependabot.
### Trusted publishing ### Trusted publishing
> [!NOTE] Trusted publishing cannot be used from within a reusable workflow at this
> time. It is recommended to instead create a non-reusable workflow that contains a
> job calling your reusable workflow, and then do the trusted publishing step from
> a separate job within that non-reusable workflow. Alternatively, you can still
> use a username/token inside the reusable workflow.
> [!NOTE] > [!NOTE]
> Trusted publishing is sometimes referred to by its > Trusted publishing is sometimes referred to by its
> underlying technology -- OpenID Connect, or OIDC for short. > underlying technology -- OpenID Connect, or OIDC for short.

3
oidc-exchange.py
View File

@ -71,6 +71,9 @@ If a claim is not present in the claim set, then it is rendered as `MISSING`.
* `repository_owner_id`: `{repository_owner_id}` * `repository_owner_id`: `{repository_owner_id}`
* `job_workflow_ref`: `{job_workflow_ref}` * `job_workflow_ref`: `{job_workflow_ref}`
* `ref`: `{ref}` * `ref`: `{ref}`
See https://docs.pypi.org/trusted-publishers/troubleshooting/ for more help.
""" """
# Rendered if the package index's token response isn't valid JSON. # Rendered if the package index's token response isn't valid JSON.