Skip to content

Document publishing job boundary#2070

Open
Himanshuagrawal4 wants to merge 1 commit into
pypa:mainfrom
Himanshuagrawal4:PRO/packaging-publish-job-boundary
Open

Document publishing job boundary#2070
Himanshuagrawal4 wants to merge 1 commit into
pypa:mainfrom
Himanshuagrawal4:PRO/packaging-publish-job-boundary

Conversation

@Himanshuagrawal4

@Himanshuagrawal4 Himanshuagrawal4 commented Jun 13, 2026

Copy link
Copy Markdown

Summary

  • add an explicit note that build and publish steps should remain in separate jobs
  • clarify that the publishing job intentionally avoids checkout/build commands
  • explain why combining the jobs is unsupported for this trusted publishing workflow

Why

The guide currently shows separate jobs, but the security boundary can be missed by readers adapting the workflow. This makes the intended structure clearer near the workflow example.

Validation

  • sphinx-build --color --keep-going -j auto -b html -n -W source build
  • git diff --check

📚 Documentation preview 📚: https://python-packaging-user-guide--2070.org.readthedocs.build/en/2070/

@Himanshuagrawal4 Himanshuagrawal4 marked this pull request as ready for review June 13, 2026 20:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant