From: Mike Bayer <mike_mp@zzzcomputing.com>
Date: Sat, 27 Jun 2026 19:46:41 +0000 (-0400)
Subject: fall back to twine upload without attestations if attestation signing fails
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7776cfbf469dbe88edbc2b9a8abc1b32b382f916;p=thirdparty%2Fsqlalchemy%2Fsqlalchemy.git

fall back to twine upload without attestations if attestation signing fails

On some platforms (e.g. windows-11-arm) pypi-attestations cannot install
due to missing cryptography binary wheels. Use continue-on-error on the
attestation step and conditionally pass --attestations to twine only when
signing succeeded.

Change-Id: Ibc9b5091c0db361f24376a887d6db04b0e32503c
---

diff --git a/.github/workflows/create-wheels.yaml b/.github/workflows/create-wheels.yaml
index 708dab5097..a0ff4ed0e1 100644
--- a/.github/workflows/create-wheels.yaml
+++ b/.github/workflows/create-wheels.yaml
@@ -128,11 +128,18 @@ jobs:
           files: './wheelhouse/*.whl'
 
       - name: Generate attestations
+        id: attestations
+        continue-on-error: true
         run: |
           pip install pypi-attestations
           python -m pypi_attestations sign ./wheelhouse/*
 
       - name: Publish wheel
+        shell: bash
         run: |
           pip install "twine>=6.2.0"
-          twine upload --skip-existing --attestations ./wheelhouse/*
+          if [[ "${{ steps.attestations.outcome }}" == "success" ]]; then
+            twine upload --skip-existing --attestations ./wheelhouse/*
+          else
+            twine upload --skip-existing ./wheelhouse/*
+          fi