Revert attestation from test.yml and add changelog

This commit is contained in:
Bruno Oliveira 2024-05-16 20:09:16 -03:00
parent 3fd5b86f2c
commit e9b340256b
2 changed files with 2 additions and 7 deletions

View File

@ -29,19 +29,13 @@ permissions: {}
jobs: jobs:
package: package:
runs-on: ubuntu-latest runs-on: ubuntu-latest
# Required by attest-build-provenance-github.
permissions:
id-token: write
attestations: write
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v4
with: with:
fetch-depth: 0 fetch-depth: 0
persist-credentials: false persist-credentials: false
- name: Build and Check Package - name: Build and Check Package
uses: hynek/build-and-inspect-python-package@v2.5.0 uses: hynek/build-and-inspect-python-package@v2.4.0
with:
attest-build-provenance-github: 'true'
build: build:
needs: [package] needs: [package]

View File

@ -0,0 +1 @@
pytest releases are now attested using the recent `Artifact Attestation <https://github.blog/2024-05-02-introducing-artifact-attestations-now-in-public-beta/>` support from GitHub, allowing users to attest the package provenance.