Configure sigstore

.github/workflows/pypi-publish.yml

@@ -2,7 +2,8 @@ name: Publish package to PyPI
 
 on:
   release:
-    types: [created]
+    types:
+      - published
   workflow_dispatch:
 
 jobs:
@@ -11,20 +12,31 @@ jobs:
     runs-on: ubuntu-latest
     environment: release
     permissions:
+      # Used to authenticate to PyPI via OIDC.
+      # Used to sign the release's artifacts with sigstore-python.
       id-token: write
+
+      # Used to attach signing artifacts to the published release.
+      contents: write
+
     steps:
       - uses: actions/checkout@v3
 
-      - name: Set up Python 3.7
-        uses: actions/setup-python@v4
+      - uses: actions/setup-python@v4
         with:
           python-version: 3.7
 
-      - name: Build
+      - name: build
         run: |
           python -m pip install poetry
           poetry install --without test,docs
           poetry build
 
-      - name: Publish package
+      - name: publish
         uses: pypa/gh-action-pypi-publish@release/v1
+
+      - name: sign
+        uses: sigstore/[email protected]
+        with:
+          inputs: ./dist/*.whl ./dist/*.tar.gz
+          release-signing-artifacts: true

pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "powerline-k8s"
-version = "1.5.0"
+version = "1.5.1"
 description = "A custom Powerline segment for displaying the current Kubernetes context and namespace"
 authors = ["Jordan Duabe <[email protected]>"]
 license = "MIT"