This GitHub Action installs the Cloudsmith CLI and pre-authenticates it using OIDC or API Key. 🚀

Breaking Changes:

• Node.js 24 Required: @v2 requires Node.js 24 as a minimum. If you still rely on Node.js 20, please use @v1 and plan for future migration.
• OIDC Audience Default Changed: The default OIDC audience has changed from api://AzureADTokenExchange to https://github.com/{org-name} (using GITHUB_REPOSITORY_OWNER) for improved security. If you're using OIDC with audience claim validation, you may need to update your configuration or explicitly set oidc-audience: 'api://AzureADTokenExchange' to maintain the previous behavior.

⚠️ Notice: If you are running on self-hosted runners, Python version 3.9 or higher is required. Please ensure your runner meets this requirement to avoid any issues. We recommend using setup-python action for installing Python. 🐍

See CLI configuration documentation for more details.

Cloudsmith OIDC documentation

uses: cloudsmith-io/cloudsmith-cli-action@v2
with:
  oidc-namespace: 'your-oidc-namespace'
  oidc-service-slug: 'your-service-account-slug'

Personal API Key can be found here. For CI-CD deployments we recommend using Service Accounts.

uses: cloudsmith-io/cloudsmith-cli-action@v2
with:
  api-key: 'your-api-key'

If you only need to authenticate with Cloudsmith's API without installing the CLI:

uses: cloudsmith-io/cloudsmith-cli-action@v2
with:
  oidc-namespace: 'your-oidc-namespace'
  oidc-service-slug: 'your-service-account-slug'
  oidc-auth-only: 'true'

This will:

• Perform OIDC authentication
• Set the OIDC token as CLOUDSMITH_API_KEY environment variable
• Skip CLI installation

Full CLI feature list can be found here

For all supported package formats and upload commands please visit our Supported Formats page.

name: Publish Python Package

on:
  push:
    branches:
      - main
permissions:
  id-token: write
  contents: read
jobs:
  publish:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Install Cloudsmith CLI
        uses: cloudsmith-io/cloudsmith-cli-action@v2
        with:
          oidc-namespace: 'your-oidc-namespace'
          oidc-service-slug: 'your-service-account-slug'

      - name: Push package to Cloudsmith
        run: |
          cloudsmith push python your-namespace/your-repository dist/*.tar.gz

Please check our CONTRIBUTION doc for more information. 🤝

This project is licensed under the MIT License - see the LICENSE file for details. 📄

If you have any questions or need further assistance, please open an issue on GitHub. We're here to help! Alternatively, you can contact us at support.cloudsmith.com.