cdkovacs/Setup Python (Artifactory)

Air-gap-friendly drop-in replacement for actions/setup-python that fetches Python from a JFrog Artifactory mirror.

Trust Signals

workflow.ymlSHA-pinned

uses: cdkovacs/setup-python-artifactory@311da3a89817c0c0722b9c026f70b8a293f84304 # no releases — HEAD as of 2026-07-11

tags can be moved; commit SHAs can't. why a SHA?

name	description	required	default
python-version	Version range or exact version of Python to use, using SemVer syntax. Reads from python-version-file if omitted.	no	—
python-version-file	File containing the Python version (e.g. .python-version). Used when python-version is not set.	no	—
architecture	Target architecture (x86, x64, arm64). Defaults to the runner architecture.	no	—
check-latest	Re-check the manifest for a newer matching version on every run, even if a satisfying version is already in the tool cache.	no	false
allow-prereleases	Match prerelease versions when no GA version satisfies the range.	no	false
update-environment	Update PATH and set pythonLocation / PKG_CONFIG_PATH / Python_ROOT_DIR after install.	no	true
artifactory-url	Base URL of Artifactory, e.g. https://artifactory.example.com/artifactory	yes	—
artifactory-repo	Name of the generic repo holding the manifest and tarballs (e.g. python-binaries-generic-local).	yes	—
artifactory-token	Bearer token (Artifactory access/identity token) used to fetch the manifest and binaries. Pass via a secret.	yes	—
manifest-path	Path within the repo to the versions manifest. Defaults to versions-manifest.json at the repo root.	no	versions-manifest.json

name	description
python-version	The installed Python version (e.g. 3.11.9).
python-path	Absolute path to the python executable.
cache-hit	True when the requested version was already present in the runner tool cache.