ci: add publish workflow, binary attestation, and dev extras

- publish.yml: automated PyPI/npm/Docker on v* tag push; OIDC trusted publishing for PyPI/npm; Docker signed with Cosign keyless + provenance attested
- attest-release.yml: manual workflow to attest binary release assets via Sigstore (actions/attest-build-provenance@v2)
- pyproject.toml: add dev extras (pytest, pytest-asyncio)
This commit is contained in:
CloakHQ
2026-03-08 02:32:33 +01:00
parent c8e09656aa
commit 23a9c4d4bd
4 changed files with 160 additions and 45 deletions
+1
View File
@@ -56,6 +56,7 @@ dependencies = [
[project.optional-dependencies]
geoip = ["geoip2>=4.0"]
patchright = ["patchright>=1.40"]
dev = ["pytest>=7.0", "pytest-asyncio>=0.23"]
[project.urls]
Homepage = "https://github.com/CloakHQ/CloakBrowser"