Sign artifacts with Sigstore (#17)

See https://packaging.python.org/en/latest/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/#signing-the-distribution-packages
databrickslabs · Jan 5, 2024 · f91ed68 · f91ed68
1 parent d6c6831
commit f91ed68
Show file tree

Hide file tree

Showing 3 changed files with 17 additions and 4 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -25,6 +25,13 @@ jobs:
         run: |
           pip install hatch==1.7.0
           hatch build
+      
+      - name: Sign artifacts with Sigstore
+        uses: sigstore/[email protected]
+        with:
+          inputs: |
+            dist/databricks_*.whl
+            dist/databricks_*.tar.gz
 
       - name: Draft release
         uses: softprops/action-gh-release@v1

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -12,6 +12,3 @@
 * Added `CODEOWNERS` for code governance.
 * Added command framework for Databricks CLI launcher frontend ([#10](https://github.com/databrickslabs/blueprint/pull/10)).
 * Added ProductInfo unreleased version fallback ([#9](https://github.com/databrickslabs/blueprint/pull/9)).
-## 0.0.0
-
-Initial commit
diff --git a/README.md b/README.md
@@ -1,8 +1,9 @@
 Databricks Labs Blueprint
 ---
 
-Baseline for Databricks Labs projects written in Python. See [Contributing instructions](CONTRIBUTING.md) if you would like to improve this project.
+Baseline for Databricks Labs projects written in Python. Sources are validated with `mypy`. See [Contributing instructions](CONTRIBUTING.md) if you would like to improve this project.
 
+- [Installation](#installation)
 - [Batteries Included](#batteries-included)
   - [Basic Terminal User Interface (TUI) Primitives](#basic-terminal-user-interface-tui-primitives)
     - [Simple Text Questions](#simple-text-questions)
@@ -30,6 +31,14 @@ Baseline for Databricks Labs projects written in Python. See [Contributing instr
     - [Starting New Projects](#starting-new-projects)
 - [Project Support](#project-support)
 
+# Installation
+
+You can install this project via `pip`:
+
+```
+pip install databricks-labs-blueprint
+```
+
 # Batteries Included
 
 This library contains a proven set of building blocks, tested in production through [UCX](https://github.com/databrickslabs/ucx) and projects.