From 0773bbbefb09bcb41fac8995d35e2120d609d7b8 Mon Sep 17 00:00:00 2001 From: Daria Van Hende Date: Thu, 28 Nov 2024 13:54:51 +0000 Subject: [PATCH 1/2] Adjust sigstore to v3. --- .github/workflows/package-publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/package-publish.yml b/.github/workflows/package-publish.yml index c32fc8a9c..c2872a0ea 100644 --- a/.github/workflows/package-publish.yml +++ b/.github/workflows/package-publish.yml @@ -99,7 +99,7 @@ jobs: name: python-package-distributions path: dist/ - name: Sign the dists with Sigstore - uses: sigstore/gh-action-sigstore-python@v2.1.1 + uses: sigstore/gh-action-sigstore-python@v3 with: inputs: >- ./dist/*.tar.gz From ce91f281559468159de203be4b3092010b0b502a Mon Sep 17 00:00:00 2001 From: Daria Van Hende Date: Thu, 28 Nov 2024 13:55:19 +0000 Subject: [PATCH 2/2] Add .0.0 to be explicit --- .github/workflows/package-publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/package-publish.yml b/.github/workflows/package-publish.yml index c2872a0ea..a13220741 100644 --- a/.github/workflows/package-publish.yml +++ b/.github/workflows/package-publish.yml @@ -99,7 +99,7 @@ jobs: name: python-package-distributions path: dist/ - name: Sign the dists with Sigstore - uses: sigstore/gh-action-sigstore-python@v3 + uses: sigstore/gh-action-sigstore-python@v3.0.0 with: inputs: >- ./dist/*.tar.gz