From 6fef5bb6746ecd7bbc1886aab76bb6be954a95c3 Mon Sep 17 00:00:00 2001
From: Ned Batchelder <ned@nedbatchelder.com>
Date: Sun, 14 May 2023 20:31:41 -0400
Subject: build: sign artifacts with sigstore

---
 .github/workflows/kit.yml | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)

diff --git a/.github/workflows/kit.yml b/.github/workflows/kit.yml
index 179f7a64..679eeed4 100644
--- a/.github/workflows/kit.yml
+++ b/.github/workflows/kit.yml
@@ -241,3 +241,28 @@ jobs:
         with:
           name: dist
           path: dist/*.whl
+
+  sign:
+    name: "Sign artifacts"
+    needs:
+      - wheels
+      - sdist
+      - pypy
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+    steps:
+      - name: "Download artifacts"
+        uses: actions/download-artifact@v3
+        with:
+          name: dist
+
+      - name: "What did we get?"
+        run: |
+          ls -alR
+
+      - name: "Sign"
+        uses: sigstore/gh-action-sigstore-python@v1.2.3
+        with:
+          inputs: coverage-*.*
+          upload-signing-artifacts: true
-- 
cgit v1.2.1