ci: make publishing dependent on checks

Author: rnovatorov

.github/workflows/ci.yml

@@ -4,7 +4,7 @@ on:
   push:
 
 jobs:
-  Ubuntu:
+  Run Checks:
     name: "Ubuntu (python-${{ matrix.python }})"
     timeout-minutes: 10
     runs-on: "ubuntu-latest"
@@ -29,3 +29,25 @@ jobs:
 
       - name: Run checks
         run: make check
+
+  Upload to PyPI:
+    runs-on: "ubuntu-latest"
+    if: ${{ startsWith(github.ref, 'refs/tags/v') }}
+    steps:
+      - uses: actions/checkout@v2
+
+      - name: Setup python
+        uses: actions/setup-python@v2
+        with:
+          python-version: "3.11"
+
+      - name: Install pipenv
+        run: make get-pipenv
+
+      - name: Install dependencies
+        run: make install-deps
+
+      - name: Publish to PyPI
+        run: make upload-to-pypi
+        env:
+          PYPI_API_TOKEN: ${{ secrets.PYPI_API_TOKEN }}