Skip to main content

ghrocker

Overview

This is an extension for rocker https://github.com/osrf/rocker

It provides bindings to locally test a site expected to be hosted in github pages locally.

Usage

ghrocker PATH_TO_GH_PAGES_REPOSITORY

The browse to http://localhost:4000 Or launch it via:

sensible-browser http://localhost:4000

Releasing to PyPI

Publishing ghrocker to PyPI is automated via GitHub Actions using PyPI Trusted Publishing (OIDC), eliminating the need for manually managed API tokens.

How It Works & What Is Configured

The workflow defined in .github/workflows/publish-pypi.yaml is split into two isolated jobs:

  1. build: Checks out the repository, installs build, builds the source distribution (.tar.gz) and wheel (.whl) into dist/, and uploads them as a build artifact.
  2. publish-to-pypi: Runs in the dedicated pypi GitHub Actions environment with id-token: write permission (and without repository checkout access). It downloads the built distribution artifacts and uses pypa/gh-action-pypi-publish to exchange a short-lived GitHub OIDC token with PyPI to publish the release.

Trusted Publisher Configuration on PyPI (https://pypi.org/p/ghrocker):

  • Owner: tfoote
  • Repository: ghrocker
  • Workflow name: publish-pypi.yaml
  • Environment name: pypi

Steps to Trigger a Release

  1. Bump the version: Update the version field in pyproject.toml (e.g., "0.0.11"), commit, and merge/push to main.
  2. Publish a GitHub Release:
    • Via the GitHub UI: Go to Releases -> Draft a new release, create/select a tag matching the version (e.g., v0.0.11), add release notes, and click Publish release.
    • Or via the GitHub CLI:
      gh release create v0.0.11 --generate-notes
      
  3. Verify: Publishing the release automatically triggers the Publish to PyPI workflow. You can also trigger the workflow manually at any time from the Actions tab via workflow_dispatch.

Metadata

Release files for ghrocker 0.0.11

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for ghrocker 0.0.11
File Size Uploaded Provenance Actions
ghrocker-0.0.11.tar.gz 10.3 kB With provenance Details for ghrocker-0.0.11.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for ghrocker 0.0.11
File Interpreter ABI Platform Actions
ghrocker-0.0.11-py3-none-any.whl Python 3 none any Details for ghrocker-0.0.11-py3-none-any.whl

Total release size: 20.1 kB

Release files / ghrocker-0.0.11.tar.gz

Download URL ghrocker-0.0.11.tar.gz
Size 10.3 kB
Tags Source
SHA-256 checksum
How to use checksums
70fed75548ee60dc80b512cfa939053c702264b33490cff5aa944d56c46d141f
BLAKE2b-256 checksum
How to use checksums
111bee828e563e663673f1cf9c99a27efe8eea8462e2c262db06320308616fa8
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 19, 2026.

Transparency log

Release files / ghrocker-0.0.11-py3-none-any.whl

Download URL ghrocker-0.0.11-py3-none-any.whl
Size 9.8 kB
Tags Python 3
SHA-256 checksum
How to use checksums
20edbf239c264629c9d913a0b2d5f00288b431144ab1b3d30357e1f83de07ba3
BLAKE2b-256 checksum
How to use checksums
07a91553b3d9bfbdf624533c8fdcfb47514c1200186474b1fceea574f0db148f
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 19, 2026.

Transparency log

Security for ghrocker 0.0.11

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

Both files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for ghrocker-0.0.11.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 19, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page