disable trusted publishing #81
ci.yaml
on: push
Release
/
Create release
6s
Release
/
Publish package to PyPI
10s
Annotations
1 error and 1 warning
|
Release / Publish package to PyPI
Trusted publishing exchange failure:
Token request failed: the server refused the request for the following reasons:
* `invalid-publisher`: valid token, but no corresponding publisher (Publisher with matching claims was not found)
This generally indicates a trusted publisher configuration error, but could
also indicate an internal error on GitHub or PyPI's part.
The claims rendered below are **for debugging purposes only**. You should **not**
use them to configure a trusted publisher unless they already match your expectations.
If a claim is not present in the claim set, then it is rendered as `MISSING`.
* `sub`: `repo:contiguity/python:environment:release`
* `repository`: `contiguity/python`
* `repository_owner`: `contiguity`
* `repository_owner_id`: `131568852`
* `workflow_ref`: `contiguity/python/.github/workflows/ci.yaml@refs/tags/v3.0.0`
* `job_workflow_ref`: `contiguity/python/.github/workflows/release.yaml@refs/tags/v3.0.0`
* `ref`: `refs/tags/v3.0.0`
* `environment`: `release`
See https://docs.pypi.org/trusted-publishers/troubleshooting/ for more help.
|
|
Release / Publish package to PyPI
Potential workflow misconfiguration:
The claims in this token suggest that the calling workflow is a reusable workflow.
In particular, this action was initiated by:
contiguity/python/.github/workflows/release.yaml@refs/tags/v3.0.0
Whereas its parent workflow is:
contiguity/python/.github/workflows/ci.yaml@refs/tags/v3.0.0
Reusable workflows are **not currently supported** by PyPI's Trusted Publishing
functionality, and are subject to breakage. Users are **strongly encouraged**
to avoid using reusable workflows for Trusted Publishing until support
becomes official. Please, do not report bugs if this breaks.
For more information, see:
* https://docs.pypi.org/trusted-publishers/troubleshooting/#reusable-workflows-on-github
* https://github.com/pypa/gh-action-pypi-publish/issues/166 — subscribe to
this issue to watch the progress and learn when reusable workflows become
supported officially
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
sdist
|
18.9 KB |
sha256:dbddcbc55841e9ab113a6a3f2195822bef6ec0a2396c4370edbaec3479b31a1a
|
|
|
wheels
|
20.5 KB |
sha256:cf403a5704dbe4d1ccd9c0028e8fe090c342ed6d89e665b0da4b08cd2ca51d5c
|
|