python-poetry / python-poetry/poetry
Add support for publishing to PyPI with a trusted publisher
Open
@Secrus is already working on this.
Since Sep 25, 2024.
kind/feature
status/triage
- Dominant language
- Python
- Stars
- 34.3k
- Forks
- 2.5k
- Avg merge
- 2d 19h
- Merged PRs (30d)
- 30
Description
- I have searched the issues of this repo and believe that this is not a duplicate.
- I have searched the FAQ and general documentation and believe that my question is not already covered.
Feature Request
pypi.org supports publishing packages via OIDC (with a "trusted publisher"). Since one of Poetry's benefits is building and publishing packages with a single CLI, I think it would be great to support this authentication scheme as well. Also pdm supports it already.
Currently, the best approach seems to be using the GitHub Action pypa/gh-action-pypi-publish after building the distribution files using Poetry:
uses: pypa/gh-action-pypi-publish@release/v1
with:
packages-dir: dist/
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.