Onboard AI learns any GitHub repo in minutes and lets you chat with it to locate functionality, understand different parts, and generate new code. Use it for free at www.getonboard.dev. Learn more →
Gh-action-pypi-publish Alternatives
Similar projects and alternatives to gh-action-pypi-publish
-
git-filter-repo
Quickly rewrite git repository history (filter-branch replacement)
-
-
InfluxDB
Collect and Analyze Billions of Data Points in Real Time. Manage all types of time series data in a single, purpose-built database. Run at any scale in any environment in the cloud, on-premises, or at the edge.
-
git-repo-sync
Git Repo Sync enables you to synchronize code to other code management platforms, such as GitLab, Gitee, etc. (by wangchucheng)
-
amplify-preview-actions
This action deploys your AWS Amplify pull request preview for your public repository
-
-
release
Contains every things needed to release jenkins core from the jenkins infra project (by jenkins-infra)
-
-
Sonar
Write Clean Python Code. Always.. Sonar helps you commit clean code every time. With over 225 unique rules to find Python bugs, code smells & vulnerabilities, Sonar finds the issues while you focus on the work.
-
-
caulking
Prevent leaks with gitleaks, and use tests to validate
-
action-helm-artifactory
Github action to test and push helm to artifactory
-
Zulip
Zulip server and web application. Open-source team chat that helps teams stay productive and focused.
-
-
-
postgres
Docker Official Image packaging for Postgres (by docker-library)
-
awesome-pyproject
An Awesome List of projects using the pyproject.toml Python configuration file.
-
guarddog
:snake: :mag: GuardDog is a CLI tool to Identify malicious PyPI and npm packages
-
pyunifiprotect
Unofficial UniFi Protect Python API and CLI
-
-
ansible-lint-action
❗️Replaced by https://github.com/marketplace/actions/run-ansible-lint
-
Onboard AI
Learn any GitHub repo in 59 seconds. Onboard AI learns any GitHub repo in minutes and lets you chat with it to locate functionality, understand different parts, and generate new code. Use it for free at www.getonboard.dev.
NOTE:
The number of mentions on this list indicates mentions on common posts plus user suggested alternatives.
Hence, a higher number means a better gh-action-pypi-publish alternative or higher similarity.
gh-action-pypi-publish reviews and mentions
Posts with mentions or reviews of gh-action-pypi-publish.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-05-20.
-
PyPI new user and new project registrations temporarily suspended
> Recently I've seen someone on Reddit trying to automate the creation of PyPI projects through GitHub Actions. The person was complaining that the first deployment couldn't use an API key for that project since it didn't exist. So I'm not surprised some people are trying to do the same for malicious purposes.
Sorry for the tangent, but: you can do this now! If you use trusted publishing, you can register a "pending publisher" for a project that doesn't exist yet. When the trusted publisher (like GitHub Actions) is used, it'll create the project[1].
All of this is supported transparently by the official publishing action for GitHub Actions[2].
[1]: https://docs.pypi.org/trusted-publishers/creating-a-project-...
-
Publishing to PyPI via GitHub Action
In the documentation example, I see that the action yaml file contains the line uses: pypa/gh-action-pypi-publish@release/v1. I have never done this before and almost went with that, but I am not sure why the example shows v1 hardcoded, so I don't think I actually want this to happen. It doesn't seem to be well explained though, and the pypi-publish action repo was also quiet on this. Is this saying that it will create a release branch in my repo and call the release v1? Or how will this appear after I've done it? Will I have to manually change this v1 to v0.1.1 in the actions file AND the pyproject.toml?
-
"Even with --dry-run pip will execute arbitrary code found in the package's setup.py. In fact, merely asking pip to download a package can execute arbitrary code"
Yeah, you're uploading to PyPi in your pipeline, great. The custom github action still uses twine because the stdlib falls short on BASIC security. https://github.com/pypa/gh-action-pypi-publish/blob/unstable/v1/twine-upload.sh
- The Python Package Index is now a GitHub secret scanning integrator
-
A note from our sponsor - Onboard AI
getonboard.dev | 4 Oct 2023
Stats
Basic gh-action-pypi-publish repo stats
5
736
0.0
13 days ago
pypa/gh-action-pypi-publish is an open source project licensed under BSD 3-clause "New" or "Revised" License which is an OSI approved license.
The primary programming language of gh-action-pypi-publish is Python.
Popular Comparisons
- gh-action-pypi-publish VS git-filter-repo
- gh-action-pypi-publish VS git-repo-sync
- gh-action-pypi-publish VS amplify-preview-actions
- gh-action-pypi-publish VS warehouse
- gh-action-pypi-publish VS release
- gh-action-pypi-publish VS trufflehog
- gh-action-pypi-publish VS roadmap
- gh-action-pypi-publish VS build
- gh-action-pypi-publish VS action-helm-artifactory
- gh-action-pypi-publish VS ansible-lint-action
Free Global Payroll designed for tech teams
Building a great tech team takes more than a paycheck. Zero payroll costs, get AI-driven insights to retain best talent, and delight them with amazing local benefits. 100% free and compliant.
try.revelo.com