What problem does it solve?
Publishing Python packages to PyPI from CI/CD pipelines often involves security risks (long-lived tokens), slow feedback loops, and lack of manual control. This skill enforces a secure, local-only publishing workflow with robust credential management.
Core Features & Use Cases
- Local-Only PyPI Publishing: Provides a script for publishing Python packages directly from your local machine, bypassing slow CI/CD pipelines.
- Doppler Credential Management: Securely retrieves PyPI API tokens from Doppler, eliminating plaintext storage and enabling easy rotation.
- CI Detection Guards: Prevents accidental execution in CI/CD environments, enforcing the local-only policy.
- Pre-Publish Validation: Automatically verifies version increments and repository state before publishing, preventing errors.
- Use Case: After a new version of your Python package has been tagged by
semantic-release, use this skill to quickly and securely publish it to PyPI from your local machine, ensuring a fast and controlled release process.
Quick Start
Publish the current Python package to PyPI using Doppler credentials.
Ensure the version has been incremented by semantic-release.