python-publish.yaml

---
name: 'Python Publish'


on:
  workflow_call:
    inputs:
      PYTHON_PROJECT_NAME:
        description: PyPi Package Project
        required: true
        type: string

      PYTHON_PROJECT_URL:
        description: PyPi Package Project
        default: pypi.org    # pypi.org | test.pypi.org 
        required: false
        type: string

    secrets:
      password:
        required: true

jobs:


  pypi-publish:
    name: Upload release to PyPI
    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')

    runs-on: ubuntu-latest
    environment:
      name: pypi
      url: https://${{ inputs.PYTHON_PROJECT_URL}}/p/${{ inputs.PYTHON_PROJECT_NAME}}/
    permissions:
      id-token: write
    steps:

      - name: Download built artifact to dist/
        uses: actions/download-artifact@v4
        with:
          name: Packages
          path: dist


      - name: Publish package distributions to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1