Fix Pypi's deployment by editing CI workflow to authenticate to Pypi via API token

openfisca / openfisca-core

OpenFisca core engine. See other repositories for countries-specific code & data.

https://openfisca.org

GNU Affero General Public License v3.0

165 stars 74 forks source link

Fix Pypi's deployment by editing CI workflow to authenticate to Pypi via API token #1203

Closed Allan-CodeWorks closed 5 months ago

Allan-CodeWorks commented 6 months ago

Technical changes

Changes the Pypi's deployment authentication way to use token API following Pypi's 2FA enforcement starting 2024/01/01

Allan-CodeWorks commented 6 months ago

Currently waiting for the actuel Token to be created in Pypi (with the openfisca-bot account`)

coveralls commented 6 months ago

coverage: 74.492%. remained the same when pulling e0bb414ea8c9cae7f057987a12e7ff1ea66aae2d on Pypi-token-api-authentication into 8adab0b47e19fa29358826ac9ed6b77ce007869f on master.

MattiSG commented 6 months ago

I understand @sandcha has provided the necessary tokens. Please let us know if this is still blocked 🙂

Allan-CodeWorks commented 6 months ago

@MattiSG @sandcha I have not heard about the token for openfisca-core and there is no new secret in the github security page so I don´t think the tokens have been issued.

sandcha commented 5 months ago

Hello, I have added a new PyPi token specific to this repository and linked to openfisca-bot PyPi account:

On GitHub, it's PYPI_TOKEN_OPENFISCA_BOT (as admin, see settings/actions/secrets).
On PyPi, logged with the shared openfisca-bot (not visible to other PyPi accounts), it's GITHUB_OPENFISCA-CORE (listed on "Account settings" page) .

We already had an organisation token on GitHub for PyPi named PYPI_TOKEN. As I understand it, it was made to fix things and is linked to a personal PyPi account (yours @benjello ?).

So this PR needs to update the secret name (see suggestion above) and it should work. Do you see anything still missing @Allan-CodeWorks?