[build] Disable attestations for trusted publishing (#11418)

Currently does not work with reusable workflows, e.g. release-nightly.yml calling release.yml

Ref: https://github.com/pypa/gh-action-pypi-publish/releases/tag/v1.11.0
     https://github.com/pypa/gh-action-pypi-publish/discussions/255
     https://github.com/pypi/warehouse/issues/11096

Authored by: bashonly
pull/11424/head
bashonly 3 weeks ago committed by GitHub
parent b6dc2c49e8
commit 428ffb75aa
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

@ -282,6 +282,7 @@ jobs:
uses: pypa/gh-action-pypi-publish@release/v1 uses: pypa/gh-action-pypi-publish@release/v1
with: with:
verbose: true verbose: true
attestations: false # Currently doesn't work w/ reusable workflows (breaks nightly)
publish: publish:
needs: [prepare, build] needs: [prepare, build]

Loading…
Cancel
Save