From 44b6a0a1473a7cc35fb4478f6e06caf2b19a3c6c Mon Sep 17 00:00:00 2001
From: Rohit kumar <rohit@veridise.com>
Date: Tue, 31 Mar 2026 14:26:58 +0530
Subject: [PATCH] Workflow updated for publish package to Pypi

---
 .github/workflows/publish.yml | 47 +++++++++++++++++++----------------
 1 file changed, 26 insertions(+), 21 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index dca2fa8..30fcd3c 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -1,46 +1,51 @@
-name: Publish package
+name: Publish Python distribution to PyPI
 
 on:
-  release:
-    types: [published]
-  workflow_dispatch:
-
-permissions:
-  contents: read
+  push:
+    tags:
+      - 'v*'
 
 jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout
+        uses: actions/checkout@v6
+
       - name: Set up Python
         uses: actions/setup-python@v5
         with:
           python-version: "3.12"
+
       - name: Build distributions
         run: |
           python -m pip install --upgrade pip
           python -m pip install build
           python -m build
+
       - name: Upload distributions
         uses: actions/upload-artifact@v4
         with:
-          name: dist
+          name: python-package
           path: dist/
+          retention-days: 7
 
-  publish:
-    needs: build
+  publish-to-pypi:
+    name: Publish Python distribution to PyPI
+    if: startsWith(github.ref, 'refs/tags/')  # only publish to PyPI on tag pushes
+    needs: [build]
     runs-on: ubuntu-latest
-    permissions:
-      id-token: write
     environment:
       name: pypi
-      url: https://pypi.org/p/audithub-sdk
+      url: "https://pypi.org/p/audithub-sdk"
+    permissions:
+      id-token: write
+
     steps:
-      - name: Download distributions
-        uses: actions/download-artifact@v4
-        with:
-          name: dist
-          path: dist/
-      - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+    - name: Download all the dists
+      uses: actions/download-artifact@v4
+      with:
+        name: python-package
+        path: dist/
+    - name: Publish distribution to PyPI
+      uses: pypa/gh-action-pypi-publish@release/v1