lfreleng-actions/📦 PyPI Publish Package
Publishes a Python project to the Python Package Index
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 6, 2026
- License
- None
Pinned Snippet
uses: lfreleng-actions/pypi-publish-action@8e46bf1bb34889591549c37d949d38fee1ab2d6b # v0.1.9tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| path_prefix | Directory location containing project code | no | . |
| environment | Environment used to source credentials | no | production |
| tag | Tag/version string for this release/build | yes | — |
| artefact_path | Path/location to build artefacts | no | dist |
| artefact_pattern | Pattern to download multiple artefacts | no | — |
| one_password_item | Path to 1Password vault credential for PyPI | no | — |
| op_service_account_token | 1Password service account credential to access vault | no | — |
| pypi_credential | PyPI API credential from GitHub secrets | no | — |
| trusted_publishing | Controls trusted publishing behaviour (auto/true/false) | no | auto |
| publish_disable | Disables the final publishing step that uploads packages | no | false |
| attestations | Enables upload/publishing support for attestations | no | false |
| no_checkout | Do not checkout local repository; used for testing | no | false |
Outputs
no outputs