Secret Santa
Steps to set up
- Create a new repository in GitHub using this repository as a template
- Generate Docker Hub PAT (Personal Access Token)
- Create an Environment in GitHub with the following secrets
- DOCKER_USERNAME (Docker Hub username)
- DOCKER_PASSWORD (Docker Hub PAT)
- Create a Docker Hub repository with the same name as the GitHub repository
- Update
assigneesinrenovate.jsonwith your GitHub username - Set up code-cove and make sure it has access to this repository
- Setup branch protection rules
- Set
Enrforcment StatustoEnabled - Make sure
Target branchesset tomainor default branch - Ensure these
Branch rulesare selectedRestrict deletionsRequire status checks to passwith these checksLintTest
Block force pushes
- Set
- Create a PyPi
Trusted Publisher - Ensure the name in
pyproject.tomlmatches the name of the package on PyPi - Make sure the following linters are installed externally of the project
- yamllint
- shellcheck
- shfmt
- node (npx/dclint)
TODO
- Handle GitHub pre-release
- Update PYTHONPATH with src folder
- Add custom user to Dockerfile
- Fix Dockerfile
- Fix health check
- Fix version number
1 maintainer
Metadata
1 maintainer
Release files for js-secret-santa 1.1.19
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| js_secret_santa-1.1.19.tar.gz | 17.0 kB | With provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| js_secret_santa-1.1.19-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 34.5 kB
Release files / js_secret_santa-1.1.19.tar.gz
| Download URL | js_secret_santa-1.1.19.tar.gz |
|---|---|
| Size | 17.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
68ab2aee2de9a33ec10caa46d497aa1de59b31ab64e723a9a543c95333268218
|
|
BLAKE2b-256 checksum How to use checksums |
803c70e46275e5c99f37581b86789bdb94edceddb3ce593fac4380ea92ac765d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 3, 2026.
Transparency logRelease files / js_secret_santa-1.1.19-py3-none-any.whl
| Download URL | js_secret_santa-1.1.19-py3-none-any.whl |
|---|---|
| Size | 17.5 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
b4df224cbac3ecb83844a57fdc8681947fecab15810da86524ab8721c3fd6cc8
|
|
BLAKE2b-256 checksum How to use checksums |
8e222bd202ad1b1e49334a5c281a3619b5fbae5641422027c139e20293632386
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 3, 2026.
Transparency logSecurity for js-secret-santa 1.1.19
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for js_secret_santa-1.1.19.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 3, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
