Skip to content

Generate GitHub actions attestations for Python wheels#159

Merged
simu merged 1 commit intomainfrom
ci/update-python-workflow
Apr 4, 2025
Merged

Generate GitHub actions attestations for Python wheels#159
simu merged 1 commit intomainfrom
ci/update-python-workflow

Conversation

@simu
Copy link
Copy Markdown
Member

@simu simu commented Apr 4, 2025

We updated the Python GitHub actions workflow based on the workflow generated by maturin 1.8.3.

The main changes are that we don't use sccache for tags anymore and that we generate GitHub actions attestations for the wheels that are uploaded to PyPI.

See https://docs.github.com/en/actions/security-for-github-actions/using-artifact-attestations/using-artifact-attestations-to-establish-provenance-for-builds for an explanation of how attestations establish build provenance for the wheels.

Checklist

  • The PR has a meaningful title. The title will be used to auto generate the changelog
  • PR contains a single logical change (to build a better changelog).
  • Categorize the PR by setting a good title and adding one of the labels:
    bug, enhancement, documentation, change, breaking, dependency, internal
    as they show up in the changelog

The main changes are that we don't use `sccache` for tags anymore and
that we generate GitHub actions attestations for the wheels that are
uploaded to PyPI
@simu simu added the internal label Apr 4, 2025
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 4, 2025

Benchmark for fff4dff

Click to view benchmark
Test Base PR %
Reclass::inventory() multi-threaded 1746.7±67.08µs 1751.4±65.80µs +0.27%
Reclass::inventory() single-threaded 3.7±0.08ms 3.6±0.06ms -2.70%

@simu simu enabled auto-merge April 4, 2025 08:53
@simu simu disabled auto-merge April 4, 2025 08:53
@simu
Copy link
Copy Markdown
Member Author

simu commented Apr 4, 2025

attestations are published in https://github.com/projectsyn/reclass-rs/attestations, e.g. https://github.com/projectsyn/reclass-rs/attestations/6087918 for a manual CI run of this branch

@simu simu changed the title Update Python GitHub actions workflow based on maturin 1.8.3 Generate GitHub actions attestations for the built Python wheels Apr 4, 2025
@simu simu added enhancement New feature or request and removed internal labels Apr 4, 2025
@simu simu changed the title Generate GitHub actions attestations for the built Python wheels Generate GitHub actions attestations for Python wheels Apr 4, 2025
@simu simu requested a review from a team April 4, 2025 09:14
@simu simu merged commit fc63546 into main Apr 4, 2025
39 checks passed
@simu simu deleted the ci/update-python-workflow branch April 4, 2025 09:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants