Run sensitive jobs within environments

Allows for fine-grain security controls. https://docs.github.com/en/actions/deployment/targeting-different-environments/using-environments-for-deployment
movermeyer · Oct 16, 2023 · 4933321 · 4933321
1 parent 837bf41
commit 4933321
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -210,6 +210,7 @@ jobs:
     needs:
       [pre_build_sanity_check, build_wheels, build_wheels_windows, build_sdist]
     runs-on: ubuntu-latest
+    environment: test_pypi
 
     steps:
       - uses: actions/download-artifact@v3
@@ -303,6 +304,7 @@ jobs:
         pre_publish_sanity_check,
       ]
     runs-on: ubuntu-latest
+    environment: production_pypi
 
     steps:
       - uses: actions/download-artifact@v3