actions-marketplace-validations/Build and Inspect a Python Package

Builds the current package using standard PyPA tooling, keeps it as artifacts, then performs checks on it.

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Activelast commit Mar 30, 2026
License: MIT

Pinned Snippet

workflow.ymlSHA-pinned

uses: actions-marketplace-validations/hynek_build-and-inspect-python-package@a438e96d10f7ec0c6549a1c3f14a8444cfe5e8ec # no releases — HEAD as of 2026-07-10

tags can be moved; commit SHAs can't. why a SHA?

Inputs

name	description	required	default
path	Where to look for the Python package to inspect.	no	.
skip-wheel	Only build the source distribution.	no	false
upload-name-suffix	Suffix to append to the artifact names.	no	""
attest-build-provenance-github	Attest provenance using GitHub's own action. Requires 'attestations: write' and 'id-token: write' permissions.	no	false
python-version	Python version to use for building the package.	no	3.14
include-free-threaded	When set to "true", free-threaded Python siblings (for example, 3.14t) are included in the version outputs for Python 3.14 and later, inserted inline after each matching version.	no	false

Outputs

name	description
artifact-name	The name of the uploaded artifact.
dist	The location of the built packages.
supported_python_classifiers_json_array	A JSON array that contains all classifier-declared supported Python versions. When loaded using the 'fromJson' function, this can be assigned to a matrix strategy key (for example, `python-version`).
supported_python_classifiers_json_job_matrix_value	Same as 'supported_python_classifiers_json_array', except it's already a JSON mapping from "python-version" to a list of all classifier-declared supported Python versions. In other words, you can assign it directly to the 'strategy.matrix' key.
package_name	The name of the package.
package_version	The version of the package as declared in the metadata.