New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

conda-build-test

Package Overview
Dependencies
Maintainers
1
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

conda-build-test

Testing packaging and uploading with GitHub actions

  • 0.4.2
  • PyPI
  • Socket score

Maintainers
1

Test package

This repo is for testing build and release automation of Python setuptools projects with GitHub Actions

Below is the needed per-repsitory setup. The workflow file itself should not need editing, instead you configure it via variables in .github/workflows/release-vars.sh. You also need to enable Trusted Publisher uploads on PyPI and TestPI, and add an API key as a repository secret in GitHub for Anaconda package uploads.

Configure repository name

This restricts upload steps to run only for workflows running in this repository.

  1. Set RELEASE_REPO in .github/workflows/release-vars.sh to the username and repository name, e.g.
    export RELEASE_REPO="chrisjbillington/conda-build-test"
    
Set up Trusted Publisher package uploads

Per the docs:

  1. Go to https://test.pypi.org/manage/account/publishing, fill in the details and do set the optional GitHub environment to testpypi.
  2. Go to https://pypi.org/manage/account/publishing, fill in the details and do set the optional GitHub environment to pypi.

For both PyPI and Test PyPI, "Workflow name" is release.yml.

Set up Anaconda uploads
  1. set ANACONDA_USER in .github/workflows/release-vars.sh, e.g:
    export ANACONDA_USER="cbillington"
    
  2. Set ANACONDA_API_TOKEN as a repository secret in GitHub. If you don't have a token, create one on your Anaconda settings page, e.g.: https://anaconda.org/cbillington/settings/access

FAQs


Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc