ci: Add package publication

Author: Synss

.github/workflows/main.yml

@@ -1,25 +1,31 @@
-name: CI
+name: main
 
 on: [push, pull_request, workflow_dispatch]
 
 jobs:
   build:
     name: Build on ${{ matrix.os }}
     runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
     strategy:
       fail-fast: false
       matrix:
         os: [ubuntu-20.04, macos-10.15, windows-2019]
         version: [2.16.11]
-
     steps:
       - uses: actions/checkout@v2
-
       - uses: actions/setup-python@v2
-
+      - name: Create source dist
+        run: python setup.py sdist
+      - name: Upload source dist
+        uses: actions/upload-artifact@v2
+        with:
+          name: dist
+          path: dist
+          if-no-files-found: error
       - name: Install cibuildwheel
         run: python -m pip install cibuildwheel==1.10.0
-
       - name: Build and test wheels
         run: python -m cibuildwheel --output-dir wheelhouse
         env:
@@ -45,6 +51,40 @@ jobs:
             && dir %LIB%
           CIBW_TEST_REQUIRES: -rrequirements/tests.txt
           CIBW_TEST_COMMAND: pytest {project}/tests
-
       - name: Inventory
         run: ls wheelhouse
+      - name: Upload wheels
+        uses: actions/upload-artifact@v2
+        with:
+          name: wheels
+          path: wheelhouse/
+          if-no-files-found: error
+
+  publish:
+    name: Publish packages
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    needs: build
+    if: >
+      github.event_name == 'push'
+      && startsWith(github.ref, 'refs/tags')
+      && github.repository == 'Synss/python-mbedtls'
+    steps:
+      - name: Download source packages
+        uses: actions/download-artifact@v2
+        with:
+          name: dist
+          path: dist
+      - name: Download wheels
+        uses: actions/download-artifact@v2
+        with:
+          name: wheels
+          path: dist
+      - name: List dir content
+        run: ls dist
+      - name: Publish to pypi
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          user: __token__
+          password: ${{ secrets.PYPI_PASSWORD }}