Automate releases to PyPI with GitHub Actions about django-components HOT 4 CLOSED

To use the action file, you need to set the the PyPI access token as an environment secret with PYPI_API_TOKEN key in Github settings. The action publishes new releases for every tagged branch of github repo.

from django-components.

Wow, this is great! Just what I was looking for!

Do you know if there are any security considerations I should be aware of when enabling this?

from django-components.

As long as you store your token as an environment secret, it's ok.
The action automatically publishes tagged commits to PyPI, so you should be careful when creating new tags, cause the tags will create new releases on PyPI.

from django-components.

Thanks! I also see that it only depends on official github and pypa plugins too. Really appreciate this!

from django-components.