Skip to content

Dk/fix publishing issue - #439

Merged
dkropachev merged 1 commit into
scylladb:masterfrom
dkropachev:dk/fix-publishing-issue
Mar 1, 2025
Merged

Dk/fix publishing issue#439
dkropachev merged 1 commit into
scylladb:masterfrom
dkropachev:dk/fix-publishing-issue

Conversation

@dkropachev

@dkropachevdkropachev commented Mar 1, 2025

Copy link
Copy Markdown

There is bug pypa/gh-action-pypi-publish#166
that does not allow to publish from reusable workflows, this is workaround for it.

Source of the issue is that whl being signed based on original workflow.
While attestation is done against reusable workflow.
As result publishing fails with:

WARNING Error during upload. Retry with the --verbose option for more details. ERROR HTTPError: 400 Bad Request from https://upload.pypi.org/legacy/ Invalid attestations supplied during upload: Could not verify the uploaded artifact using the included attestation: Verification failed: Certificate's Build Config URI (<Extension(oid=<ObjectIdentifier(oid=1.3.6.1.4.1.57264.1.18, name=Unknown OID)>, critical=False, value=<UnrecognizedExtension(oid=<ObjectIdentifier(oid=1.3.6.1.4.1.5726
4.1.18, name=Unknown OID)>, value=b'\x0cbhttps://github.com/scylladb/python-driver/.github/workflow
s/publish-manually.yml@refs/heads/master')>)>) does not match expected Trusted Publisher (lib-build-and-push.yml @ scylladb/python-driver) 

Pre-review checklist

  • I have split my patch into logically separate commits.
  • All commit messages clearly explain what they change and why.
  • I added relevant tests for new features and bug fixes.
  • All commits compile, pass static checks and pass test.
  • PR description sums up the changes and reasons why they should be introduced.
  • I have provided docstrings for the public items that I want to introduce.
  • I have adjusted the documentation in ./docs/source/.
  • I added appropriate Fixes: annotations to PR description.

@dkropachev
dkropachevforce-pushed the dk/fix-publishing-issue branch from 10c9b4b to 13f0a1fCompareMarch 1, 2025 03:12
There is bug pypa/gh-action-pypi-publish#166
that does not allow to publish from reusable workflows, this is
workaround for it.
@dkropachev
dkropachevforce-pushed the dk/fix-publishing-issue branch from 13f0a1f to 70c0d8dCompareMarch 1, 2025 03:32
@dkropachev
dkropachev marked this pull request as ready for review March 1, 2025 03:34
@dkropachev
dkropachev merged commit 2cb73ff into scylladb:masterMar 1, 2025
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@dkropachev