Add comment on PyPI sigstore (#139)

hynek · Sep 3, 2024 · e4625db · e4625db
1 parent e84d5f7
commit e4625db
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -100,6 +100,9 @@ While *build-and-inspect-python-package* will build a wheel for you by default,
   The only meaningful value is `'true'` (note the quotes – GitHub Actions only allow string inputs) and everything else is treated as falsey.
   (*optional*, default: `'false'`).
 
+  > [!IMPORTANT]
+  > This is different from PyPI's [Sigstore](https://www.sigstore.dev) attestations that you can generate while uploading using [*pypa/gh-action-pypi-publish*](https://github.com/pypa/gh-action-pypi-publish?tab=readme-ov-file#generating-and-uploading-attestations).
+
 
 ### Outputs