aquacommander/Build and Inspect a Python Package
Builds the current package using standard PyPA tooling, keeps it as artifacts, then performs checks on it.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Feb 9, 2026
- License
- MIT
Pinned Snippet
uses: aquacommander/build-and-inspect-python-package@39afbd20792068ff7a2cd666c288545ae3405b2b # no releases — HEAD as of 2026-07-13tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Where to look for the Python package to inspect. | no | . |
| skip-wheel | Only build the source distribution. | no | false |
| upload-name-suffix | Suffix to append to the artifact names. | no | "" |
| attest-build-provenance-github | Attest provenance using GitHub's own action. Requires 'attestations: write' and 'id-token: write' permissions. | no | false |
Outputs
| name | description |
|---|---|
| artifact-name | The name of the uploaded artifact. |
| dist | The location of the built packages. |
| supported_python_classifiers_json_array | A JSON array that contains all classifier-declared supported Python versions. When loaded using the 'fromJson' function, this can be assigned to a matrix strategy key (for example, `python-version`). |
| supported_python_classifiers_json_job_matrix_value | Same as 'supported_python_classifiers_json_array', except it's already a JSON mapping from "python-version" to a list of all classifier-declared supported Python versions. In other words, you can assign it directly to the 'strategy.matrix' key. |
| package_name | The name of the package. |
| package_version | The version of the package as declared in the metadata. |