Skip to content

Recommend Trusted Publishing in the packaging tutorial #2140

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
jw9829 wants to merge 3 commits into
base: main
Choose a base branch
from
Open

Recommend Trusted Publishing in the packaging tutorial #2140

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
93a7eeb
Recommend Trusted Publishing in tutorial
jw9829 Sep 27, 2026
6017b2f
Move Trusted Publishing note into a tip
jw9829 Sep 28, 2026
fe6b6af
Move trusted publishing tip before upload steps
jw9829 Sep 30, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 10 additions & 4 deletions source/tutorials/packaging-projects.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -491,6 +491,12 @@ PyPI, which isn't a permanent storage. The Test system occasionally deletes
packages and accounts. It is best to use TestPyPI for testing and experiments
like this tutorial.

.. tip::

For projects published through a supported CI/CD platform, we recommend
:ref:`Trusted Publishing <trusted-publishing>` instead of storing a long-lived
API token. The linked guide shows how to set this up with GitHub Actions.

When you are ready to upload a real package to the Python Package Index you can
do much the same as you did in this tutorial, but with these important
differences:
Expand All @@ -500,10 +506,10 @@ differences:
* Register an account on https://pypi.org - note that these are two separate
servers and the login details from the test server are not shared with the
main server.
* Use ``twine upload dist/*`` to upload your package and enter your credentials
for the account you registered on the real PyPI. Now that you're uploading
the package in production, you don't need to specify ``--repository``; the
package will upload to https://pypi.org/ by default.
* For a manual upload, use ``twine upload dist/*`` to upload your package and
enter your credentials for the account you registered on the real PyPI. Now
that you're uploading the package in production, you don't need to specify
``--repository``; the package will upload to https://pypi.org/ by default.
* Install your package from the real PyPI using ``python3 -m pip install [your-package]``.

At this point if you want to read more on packaging Python libraries here are
Expand Down
Loading