launchdarkly / python-server-sdk

LaunchDarkly Server-side SDK for Python
https://docs.launchdarkly.com/sdk/server-side/python
Other
38 stars 44 forks source link

build: adding provenance generation to release-please workflow #256

Closed rsoberano-ld closed 5 months ago

rsoberano-ld commented 5 months ago

Requirements

Related issues

Provide links to any issues in this repository or elsewhere relating to this pull request.

Describe the solution you've provided

Using Github SLSA generator to generate build provenance for python-server-sdk

Implementation based off of previous SDK SLSA integrations with release-please and Python-specific guidance here: https://sethmlarson.dev/python-and-slsa#generating-a-provenance-attestation

Describe alternatives you've considered

Provide a clear and concise description of any alternative solutions or features you've considered.

Additional context

Add any other context about the pull request here.

rsoberano-ld commented 5 months ago

@keelerm84 does the manual-publish.yml workflow publish anything to Github releases?

keelerm84 commented 5 months ago

@keelerm84 does the manual-publish.yml workflow publish anything to Github releases?

It probably uploads a compressed copy of the source code, but the actual publication of the package is handled through pypi.