ol-infrastructure
ol-infrastructure copied to clipboard
Switch PyPI packages to using Github Actions and relying on OIDC identities
Description/Context
Switch PyPI packages to using Github Actions and relying on OIDC identities in place of hardcoded secrets. The steps are outlined here
Plan/Design
- Identify all the packages that we upload to PyPI
- Add a trusted publisher to an existing PyPI project
- Create or modify the existing Github action to use OIDC
Hey I built this for Anastasia's ai tutor!
You can steal my GH action from here:
https://github.com/mitodl/open-learning-ai-tutor/blob/main/.github/workflows/publish.yml