Chore: More badges, add PyPI secrets to workflow (#164)

Signed-off-by: Matthew Watkins <[email protected]>

.github/workflows/repository.yaml

@@ -249,8 +249,17 @@ jobs:
         if: steps.url-check.outputs.valid == 'true'
         with:
           repository-url: https://test.pypi.org/legacy/
-          verbose: true
+          # Show checksum values
+          print-hash: true
           packages-dir: ${{ env.build-artefacts }}
+          # We already validate earlier in the pipeline
+          verify-metadata: false
+          # Test releases are always debugged
+          verbose: true
+          # Organisation secret/variable
+          # Defined/stored in 1Password
+          user: osclimate
+          password: ${{ secrets.OSC_PYPI_TEST }}
 
   pypi:
     name: "Publish Package"
@@ -282,8 +291,15 @@ jobs:
       - name: "Publish to PyPI"
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
-          verbose: true
+          # Show checksum values
+          print-hash: true
           packages-dir: ${{ env.build-artefacts }}
+          # We already validate earlier in the pipeline
+          verify-metadata: false
+          # Organisation secret/variable
+          # Defined/stored in 1Password
+          user: osclimate
+          password: ${{ secrets.OSC_PYPI_PROD }}
 
   notebooks:
     name: "Jupyter Notebooks"

README.md

@@ -2,18 +2,17 @@
 
 <!-- prettier-ignore-start -->
 <!-- markdownlint-disable-next-line MD013 -->
-[![🔐 CodeQL](https://github.com/os-climate/devops-reusable-workflows/actions/workflows/codeql.yaml/badge.svg)](https://github.com/os-climate/devops-reusable-workflows/actions/workflows/codeql.yaml) [![Dependabot Updates](https://github.com/os-climate/devops-reusable-workflows/actions/workflows/dependabot/dependabot-updates/badge.svg)](https://github.com/os-climate/devops-reusable-workflows/actions/workflows/dependabot/dependabot-updates) [![PyPI](https://img.shields.io/pypi/v/pdm?logo=python&logoColor=%23cccccc)](https://pypi.org/project/osc-devops-reusable-workflows) [![pdm-managed](https://img.shields.io/endpoint?url=https%3A%2F%2Fcdn.jsdelivr.net%2Fgh%2Fpdm-project%2F.github%2Fbadge.json)](https://pdm-project.org)
+[![🔐 CodeQL](https://github.com/os-climate/devops-reusable-workflows/actions/workflows/codeql.yaml/badge.svg)](https://github.com/os-climate/devops-reusable-workflows/actions/workflows/codeql.yaml) [![Dependabot Updates](https://github.com/os-climate/devops-reusable-workflows/actions/workflows/dependabot/dependabot-updates/badge.svg)](https://github.com/os-climate/devops-reusable-workflows/actions/workflows/dependabot/dependabot-updates) [![PyPI](https://img.shields.io/pypi/v/pdm?logo=python&logoColor=%23cccccc)](https://pypi.org/project/osc-devops-reusable-workflows) [![pdm-managed](https://img.shields.io/endpoint?url=https%3A%2F%2Fcdn.jsdelivr.net%2Fgh%2Fpdm-project%2F.github%2Fbadge.json)](https://pdm-project.org) [![Ruff](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/astral-sh/ruff/main/assets/badge/v2.json)](https://github.com/astral-sh/ruff) [![🧪 GitHub Actions CI/CD workflow tests badge]][GHA workflow runs list]
+[![pre-commit.ci status badge]][pre-commit.ci results page]
 <!-- prettier-ignore-end -->
 
-## Repository: devops-reusable-workflows
+## A set of composite actions and reusable workflows for OS-Climate Python projects
 
-A set of composite actions and reusable workflows for OS-Climate Python projects.
+### OS-Climate and FINOS are both Linux Foundation projects
 
-### Part of OS-Climate and FINOS, both Linux Foundation projects
-
-[https://www.linuxfoundation.org/](https://www.linuxfoundation.org/)
-[https://os-climate.org/](https://os-climate.org/)
-[https://www.finos.org/](https://www.finos.org/)
+- [https://os-climate.org/](https://os-climate.org/)
+- [https://www.finos.org/](https://www.finos.org/)
+- [https://www.linuxfoundation.org/](https://www.linuxfoundation.org/)
 
 ### Description
 
@@ -33,7 +32,7 @@ using the supplied GitHub composite actions, reusable workflows, and workflows.
 
 Relevant link to the Python package index project page:
 
-[osc-devops-reusable-workflows](https://pypi.org/project/osc-devops-reusable-workflows)
+- [osc-devops-reusable-workflows](https://pypi.org/project/osc-devops-reusable-workflows)
 
 Detailed documentation will be supplied here, once further development is done.
 
@@ -48,3 +47,8 @@ In the meantime, here is some general documentation covering the relevant topics
 [comment]: # SPDX-License-Identifier: Apache-2.0
 [comment]: # SPDX-FileCopyrightText: 2024 The Linux Foundation <https://linuxfoundation.org>
 -->
+
+[🧪 GitHub Actions CI/CD workflow tests badge]: https://github.com/os-climate/devops-reusable-workflows/actions/workflows/repository.yaml/badge.svg?branch=main&event=push
+[GHA workflow runs list]: https://github.com/os-climate/devops-reusable-workflows/actions/workflows/repository.yaml?query=branch%3Amain
+[pre-commit.ci results page]: https://results.pre-commit.ci/latest/github/os-climate/gh-action-pypi-publish/unstable/v1
+[pre-commit.ci status badge]: https://results.pre-commit.ci/badge/github/os-climate/gh-action-pypi-publish/unstable/v1.svg