From c825515ee61b63b67fc82fce68a798e8aee1947d Mon Sep 17 00:00:00 2001
From: GitHub <action@github.com>
Date: Tue, 26 May 2026 22:50:28 +0800
Subject: [PATCH] ci: disable sigstore attestations to fix 502 from rekor

Sigstore's rekor server returning intermittent 502 Bad Gateway,
blocking all publishes. Attestations are optional; disable until
the service stabilizes.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
---
 .github/workflows/publish.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index ceb8980..ad6b1ef 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -25,3 +25,5 @@ jobs:
       - run: python -m build
 
       - uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          attestations: false