Closed lwasser closed 2 months ago
@lwasser I'm happy to take on this one. Where would you like this applied, only in this repo?
@blink1073 that would be amazing! yes!! if you are able to document what you do in applying it that would be super helpful for when we create a tutorial on ci workflows to publish to pypi. thank you!!
@blink1073 Thanks for pitching in! Great to see you over here and at PyCon. ☀️
Great to see you too @willingc, happy to help!
if you are able to document what you do in applying it that would be super helpful for when we create a tutorial on ci workflows to publish to pypi. thank you!!
Will do!
In this issue @webknjaz suggested looking into sigstore as a way to sign releases and add additional security to our builds. myself and @willingc have implemented everything else in that issue short of sigstore. this can be implemented in a future release / effort! Notes on it below: