Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Investigate and find workaround for broken publishing on reusable workflow #440

Closed
dkropachev opened this issue Mar 4, 2025 · 0 comments · Fixed by #442
Closed

Investigate and find workaround for broken publishing on reusable workflow #440

dkropachev opened this issue Mar 4, 2025 · 0 comments · Fixed by #442
Assignees

Comments

@dkropachev
Copy link
Collaborator

dkropachev commented Mar 4, 2025

There is pypa issue on that: pypa/gh-action-pypi-publish#166
But we need to find a way to work it around
Failure:

HTTPError: 400 Bad Request from https://upload.pypi.org/legacy/        
         Invalid attestations supplied during upload: Could not verify the      
         uploaded artifact using the included attestation: Verification failed: 
         Certificate's Build Config URI                                         
         (<Extension(oid=<ObjectIdentifier(oid=1.3.6.1.4.1.57264.1.18,          
         name=Unknown OID)>, critical=False,                                    
         value=<UnrecognizedExtension(oid=<ObjectIdentifier(oid=1.3.6.1.4.1.5726
         4.1.18, name=Unknown OID)>,                                            
         value=b'\x0c^https://github.com/scylladb/python-driver/.github/workflow
         s/build-push.yml@refs/pull/442/merge')>)>) does not match expected     
         Trusted Publisher (lib-build-and-push.yml @ scylladb/python-driver) 
@dkropachev dkropachev self-assigned this Mar 4, 2025
@dkropachev dkropachev mentioned this issue Mar 5, 2025
8 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant