Merge pull request #5 from nomad-coe/release

Update gh workflow

.github/workflows/publish.yml

@@ -1,19 +1,23 @@
-name: upload-package
+# Upload python package to pypi server and github release.
+# Reference: https://packaging.python.org/en/latest/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/
+
+name: Upload Python Package
 
 on:
   release:
     types: [published]
 
 jobs:
-  github-release:
+  publish-to-pypi:
     name: >-
-      Sign the Python distribution with Sigstore
-      and upload them to GitHub Release
+      Publish distribution to PyPI
     runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/nomad-normalizer-plugin-spectra
     permissions:
-      contents: write # IMPORTANT: mandatory for making GitHub Releases
-      id-token: write # IMPORTANT: mandatory for sigstore
-
+      id-token: write # IMPORTANT: mandatory for trusted publishing
+
     steps:
       - uses: actions/checkout@v4
       - name: Set up Python
@@ -28,27 +32,5 @@ jobs:
           --user
       - name: Build a binary wheel and a source tarball
         run: python3 -m build
-      - name: Sign the dists with Sigstore
-        uses: sigstore/[email protected]
-        with:
-          inputs: >-
-            ./dist/*.tar.gz
-            ./dist/*.whl
-      - name: Create GitHub Release
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-        run: >-
-          gh release create
-          '${{ github.ref_name }}'
-          --repo '${{ github.repository }}'
-          --notes ""
-      - name: Upload artifact signatures to GitHub Release
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-        # Upload to GitHub Release using the `gh` CLI.
-        # `dist/` contains the built packages, and the
-        # sigstore-produced signatures and certificates.
-        run: >-
-          gh release upload
-          '${{ github.ref_name }}' dist/**
-          --repo '${{ github.repository }}'
+      - name: Publish distribution  to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1