Generate Artifact Attestation (#12)

zariiii9003 · Nov 19, 2024 · 3eeb856 · 3eeb856
1 parent 68f9689
commit 3eeb856
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/.github/workflows/wheels.yml b/.github/workflows/wheels.yml
@@ -50,8 +50,11 @@ jobs:
         with:
           python-version: "3.10"
 
+      - name: Install build
+        run: python -m pip install build
+
       - name: Build sdist
-        run: pipx run build --sdist
+        run: python -m build --sdist
 
       - uses: actions/upload-artifact@v4
         with:
@@ -78,5 +81,10 @@ jobs:
           path: dist
           merge-multiple: true
 
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: 'dist/*'
+
       - name: Publish package distributions to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1