Skip to content

Pin package build and upload-check tools #313

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
rmcdaniel wants to merge 5 commits into from
Closed

Pin package build and upload-check tools #313

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
ae97163
Pin package build tools and require the policy YAML wheel
rmcdaniel Nov 13, 2026
9f11fde
Quote the binary-only install command as a YAML block
rmcdaniel Nov 13, 2026
5f50e02
Stack package tooling after accepted replay and credential fixes
rmcdaniel Nov 13, 2026
6d5501e
Use reviewed wheel-only installs for policy and package tools
rmcdaniel Nov 13, 2026
7f4738f
Merge reviewed credential validation for package-tool qualification
rmcdaniel Nov 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 4 additions & 2 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -52,7 +52,8 @@ jobs:
- name: Bootstrap patched pip trust
uses: durable-workflow/.github/.github/actions/bootstrap-patched-pip@75587fc33ff40c34f32ef777293dad56bb6f48c7 # clean-trust
- name: Install policy dependencies
run: python -m pip install PyYAML==6.0.2
run: >-
python -m pip install --only-binary :all: PyYAML==6.0.2
- name: Require centrally approved immutable action commits
run: >-
python .central-action-policy/scripts/qualification_policy.py validate
Expand Down Expand Up @@ -191,7 +192,8 @@ jobs:
uses: durable-workflow/.github/.github/actions/bootstrap-patched-pip@75587fc33ff40c34f32ef777293dad56bb6f48c7 # clean-trust
with:
clients: pip,python
- run: pip install build twine
- run: >-
pip install --only-binary :all: build==1.6.1 twine==7.0.0
- run: python -m build
- name: Compare built release metadata with the exact source commit
run: python scripts/check_release_metadata.py --source-ref "$(git rev-parse HEAD)" --dist dist
Expand Down
3 changes: 2 additions & 1 deletion .github/workflows/publish.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -113,7 +113,8 @@ jobs:
clients: pip,python

- name: Install build tools
run: pip install build twine
run: >-
pip install --only-binary :all: build==1.6.1 twine==7.0.0

- name: Build package
run: python -m build
Expand Down
Loading