ci: fixing jf upload usage

Author: pthierry-ledger

.github/workflows/publish-to-jfrog.yml

@@ -17,6 +17,7 @@ jobs:
     permissions:
       id-token: write
       contents: read
+      attestations: write
 
     steps:
       - name: Set up Python 3.10
@@ -35,13 +36,13 @@ jobs:
       - name: set jfrog Repo URL
         run: jf pip-config --repo-resolve=${{ secrets.JFROG_PYPI_REPO_URL }}
       - name: upload package
-        run: jf rt u dist/ --build-name=dts-util-devel --build-number=1 --module=dts-utils
+        run: jf rt u --build-name=dts-util-devel --build-number=1 --module=dts-utils 'dist/*.tar.gz' 'outpost-pypi-dev-green/outpost-pypi-dev-green/'
       - name: Attest
         id: attest
         uses: LedgerHQ/actions-security/actions/attest@actions/attest-1
         with:
-          subject-path: 'dist/*'
-          push-to-registry: true
+          subject-path: 'dist/*.tar.gz'
+          push-to-registry: false
       - name: test install from jfrog
         run: |
           jf pip install dts-utils