pypa/gh-action-pypi-publish
View on GitHub ↗ ★ 1,189 Python
The blessed :octocat: GitHub Action, for publishing your :package: distribution files to PyPI, the tokenless way: https://github.com/marketplace/actions/pypi-publish
4 mentions on Hacker News by 4 people: 0 stories, 4 comments · first 2021-03-24 · latest 2025-03-15
20082026
-
…was worried about. I tend to stick to the official GitHub ones (actions/setup-python etc) plus the https://github.com/pypa/gh-action-pypi-publish one because I trust the maintainers to have good security habits.
comment by simonw · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos -
…you can subscribe to for automatically generated attestations in the GitHub CI PyPi upload action: https://github.com/pypa/gh-action-pypi-publish/issues/288
comment by ashvardanian · 2024-11-14 · in PyPI now supports digital attestations -
…for GitHub Actions[2]. [1]: https://docs.pypi.org/trusted-publishers/creating-a-project-... [2]: https://github.com/pypa/gh-action-pypi-publish
comment by woodruffw · 2023-05-21 · in PyPI new user and new project registrations temporarily suspended -
…what you're asking for, but the PyPA does maintain a GitHub Action for publishing to PyPI as well: https://github.com/pypa/gh-action-pypi-publish
comment by di · 2021-03-24 · in The Python Package Index is now a GitHub secret scanning integrator