From 07d6ec9fd47492e0f5c1b0a2881bf54dba0d55e2 Mon Sep 17 00:00:00 2001 From: William Woodruff Date: Fri, 10 Jan 2025 14:27:05 -0500 Subject: [PATCH 1/3] README: add a notice about whether this action is needed Signed-off-by: William Woodruff --- README.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/README.md b/README.md index 379ed05..cac60bd 100644 --- a/README.md +++ b/README.md @@ -7,6 +7,12 @@ gh-action-sigstore-python A GitHub Action that uses [`sigstore-python`](https://github.com/sigstore/sigstore-python) to generate Sigstore signatures. +> [!IMPORTANT] +> +> Are you publishing a package? If so, you **do not need this action**: +> [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) +> will handle signing for you! + ## Index * [Usage](#usage) From bc0624bdf5503da10c29410d17cef8f91b191a45 Mon Sep 17 00:00:00 2001 From: William Woodruff Date: Fri, 10 Jan 2025 14:36:09 -0500 Subject: [PATCH 2/3] fix formatting Signed-off-by: William Woodruff --- README.md | 1 - 1 file changed, 1 deletion(-) diff --git a/README.md b/README.md index cac60bd..73c497f 100644 --- a/README.md +++ b/README.md @@ -8,7 +8,6 @@ A GitHub Action that uses [`sigstore-python`](https://github.com/sigstore/sigsto to generate Sigstore signatures. > [!IMPORTANT] -> > Are you publishing a package? If so, you **do not need this action**: > [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) > will handle signing for you! From d7f0f7df11ae598d589bd416b9019009a8d7291f Mon Sep 17 00:00:00 2001 From: William Woodruff Date: Fri, 10 Jan 2025 14:37:58 -0500 Subject: [PATCH 3/3] clarify we mean PyPI Signed-off-by: William Woodruff --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 73c497f..67222ea 100644 --- a/README.md +++ b/README.md @@ -8,7 +8,7 @@ A GitHub Action that uses [`sigstore-python`](https://github.com/sigstore/sigsto to generate Sigstore signatures. > [!IMPORTANT] -> Are you publishing a package? If so, you **do not need this action**: +> Are you publishing a package to PyPI? If so, you **do not need this action**: > [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) > will handle signing for you!