diff --git a/.github/workflows/maturin.yaml b/.github/workflows/maturin.yaml index 625a4b561..ce5b6bef5 100644 --- a/.github/workflows/maturin.yaml +++ b/.github/workflows/maturin.yaml @@ -77,8 +77,9 @@ jobs: pypi-publish: name: Publish artifacts to Uptick's Pypi repo - if: startswith(github.ref, 'ref/tags/') + if: startsWith(github.ref, 'refs/tags/') permissions: + id-token: write contents: write needs: [linux, macos] runs-on: ubuntu-latest @@ -87,13 +88,23 @@ jobs: with: path: dist merge-multiple: true - - uses: uptick/actions/.github/workflows/ci.yaml@main # ratchet:exclude - secrets: inherit + + - name: Install uv + uses: astral-sh/setup-uv@1e862dfacbd1d6d858c55d9b792c756523627244 # ratchet:astral-sh/setup-uv@v7 + with: + version: "0.5.0" + + - name: Setup and Configure AWS Credentials + uses: aws-actions/configure-aws-credentials@61815dcd50bd041e203e49132bacad1fd04d2708 # ratchet:aws-actions/configure-aws-credentials@v5 with: - pypi-dist: dist - uv: true - python: true - s3pypi-publish: true + role-to-assume: arn:aws:iam::610829907584:role/default-github-actions-ci-role + role-session-name: vrp-pypi-publish + aws-region: us-east-1 + + - name: Build and Publish Package to S3Pypi + shell: bash + run: | + uvx s3pypi@2.0.1 upload dist/* --bucket s3pypi-610829907584-us-east-1 gh-publish: name: Publish artifacts to GH if: startsWith(github.ref, 'refs/tags/')