ci: Add GitHub artifact attestations to package distribution #2644

	name: CI/CD

	on:
	push:
	branches:
	- main
	pull_request:
	# Run daily at 0:01 UTC
	schedule:
	- cron: '1 0 * * *'
	workflow_dispatch:

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	contents: read

	jobs:
	test:

	runs-on: ${{ matrix.os }}
	strategy:
	matrix:
	os: [ubuntu-latest]
	python-version: ['3.8', '3.9', '3.10', '3.11', '3.12']

	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: Set up Python ${{ matrix.python-version }}
	uses: actions/setup-python@v5
	with:
	python-version: ${{ matrix.python-version }}

	- name: Install dependencies
	run: \|
	python -m pip install uv
	uv pip install --system --upgrade pip wheel
	uv pip install --system --quiet '.[test]'
	python -m pip list

	- name: Install external packages
	run: >-
	sudo apt-get update -y &&
	sudo apt-get install -y
	graphviz
	texlive-latex-base
	texlive-fonts-extra
	texlive-extra-utils

	- name: Test with pytest
	run: \|
	pytest -r sx tests/

	- name: Report core project coverage with Codecov
	if: >-
	github.event_name != 'schedule' &&
	matrix.os == 'ubuntu-latest'
	uses: codecov/codecov-action@v4
	with:
	fail_ci_if_error: true
	files: ./coverage.xml
	flags: unittests-${{ matrix.python-version }}
	name: pylhe
	token: ${{ secrets.CODECOV_TOKEN }}

	docker:

	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0
	- name: Build Docker image
	run: \|
	docker build . --file docker/Dockerfile --tag pylhe/pylhe:$GITHUB_SHA
	docker images

Provide feedback