publish_release.yml

name: Publish PyPI Release

on:
  release:
    types: [ created ]

permissions:
  id-token: write
  contents: read

jobs:
  publish_release:
    runs-on: ubuntu-latest

    steps:
      - name: Run Cimon (eBPF).
        uses: cycodelabs/cimon-action@v0
        with:
          prevent: true
          allowed-hosts: >
            files.pythonhosted.org
            install.python-poetry.org
            pypi.org
            upload.pypi.org
            *.sigstore.dev

      - name: Checkout repository.
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Setup Python.
        uses: actions/setup-python@v4
        with:
          python-version: 3.8

      - name: Setup Poetry.
        uses: snok/install-poetry@v1
        with:
          version: 1.8.3

      - name: Install Poetry Plugin.
        run: poetry self add "poetry-dynamic-versioning[plugin]"

      - name: Build package.
        run: poetry build

      - name: Publish a Python distribution to PyPI.
        uses: pypa/gh-action-pypi-publish@release/v1