Tags: cueapi/cueapi-python
Tags
security: add PEP 740 attestations to PyPI publish (#17) * security: add PEP 740 attestations to PyPI publish workflow - Pin pypa/gh-action-pypi-publish to SHA (v1.14.0) - Enable attestations: true for PEP 740 provenance - Add test job before publish (tests must pass before release) - Add explicit permissions: { contents: read } at workflow level - Bump version to 0.1.1 - Document attestation in README Co-Authored-By: Claude Opus 4.6 <[email protected]> * fix: remove test job from publish workflow SDK tests are integration tests requiring staging API + service containers. They run on PRs via feature-to-main.yml. The publish workflow trusts that tests passed during the PR process. Co-Authored-By: Claude Opus 4.6 <[email protected]> --------- Co-authored-by: Gk <[email protected]> Co-authored-by: Claude Opus 4.6 <[email protected]>