burnash / gspread

Google Sheets Python API
https://docs.gspread.org
MIT License
6.96k stars 934 forks source link

Investigate Pypi Trusted Publisher #1331

Open lavigne958 opened 8 months ago

lavigne958 commented 8 months ago

Overview

We should enable trusted publishers in order to publish packages to TestPypi and Pypi without the need of passwords and username. (Don't know if we need it but it's worth checking-out)

alifeee commented 8 months ago

blog post about why: https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/

how-to guide: https://docs.pypi.org/trusted-publishers/

lavigne958 commented 3 months ago

I went through the doc, we can't use it for now, only the owner of the project can do it.

We need @burnash assistance for this. please.

burnash commented 3 months ago

Hi @lavigne958, thanks for pinging me. I've added the new GitHub publisher for this repo to Trusted Publishers with these settings: Workflow: release.yaml Environment name: release

lavigne958 commented 3 months ago

Hi thank you for the prompt reply ! thanks for the settings, we'll update the release workflow and test it next time we release.

lavigne958 commented 1 month ago

@burnash I am wondering, did you create the release environment in the repository ? I don't have access to it, I can't check.

I did not manage to make it work, I believe it could be because the env does not exist.

lavigne958 commented 2 weeks ago

I removed this issue from next release as for now we are stuck until we manged to make a new release using the trusted publisher workflow