Add python GitHub Attestations (#53)

mongodb-labs · Jul 25, 2024 · 5ed619b · 5ed619b
1 parent 49bef07
commit 5ed619b
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/python/publish/action.yml b/python/publish/action.yml
@@ -89,6 +89,15 @@ runs:
       shell: bash
       run: |
         echo "Dry run, not uploading to PyPI" >> $GITHUB_STEP_SUMMARY
+    - uses: actions/attest-build-provenance@v1
+      if: inputs.dry_run == 'false'
+      with:
+        subject-path: dist/*
+    - uses: actions/attest-sbom@v1
+      if: inputs.dry_run == 'false'
+      with:
+        subject-path: dist/*
+        sbom-path: ${{ env.RELEASE_ASSETS }}/cyclonedx.sbom.json
     - name: Ensure a clean repo
       shell: bash
       run: |