actions-marketplace-validations/PyPI Deployment
Securely build and upload Python distributions to PyPI
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| user | PyPI username | no | __token__ |
| password | PyPI password or API token | no | — |
| registry_domain | PyPI trusted publisher URL | no | https://upload.pypi.org |
| requirements | Packages to `pip install` before building | no | twine wheel build |
| setup | `setup.py` command to run ("true" is a shortcut for "clean sdist -d <dist_dir> bdist_wheel -d <dist_dir>") | no | false |
| build | `python -m build` command to run ("true" is a shortcut for "-o <dist_dir>") | no | false |
| pip | `pip` command to run ("true" is a shortcut for "wheel -w <dist_dir> --no-deps .") | no | false |
| check | Whether to run basic checks on the built files | no | true |
| upload | Whether to upload | no | true |
| dist_dir | Directory containing distributions | no | dist |
| url | Destination repository (package index) URL | no | — |
| attestations | Use PEP 740 attestations if `upload`ing to a trusted publisher `registry_domain` | no | true |
| gpg_key | GPG key to import for signing | no | — |
| skip_existing | Continue uploading files if one already exists | no | false |
Outputs
| name | description |
|---|---|
| whl | Basename of *.whl for upload |
| targz | Basename of *.tar.gz for upload |
| whl_asc | Basename of *.whl.asc for upload (requires <gpg_key>) |
| targz_asc | Basename of *.tar.gz.asc for upload (requires <gpg_key>) |