Update workflows

Author: anh9895

.github/workflows/publish-package.yaml

@@ -85,16 +85,18 @@ jobs:
           name: dist-package-3.11
           path: dist
 
-#      - name: Publish distribution 📦 to Test PyPI
-#        uses: pypa/gh-action-pypi-publish@release/v1
-#        with:
-#          skip_existing: true
-#          user: __token__
-#          password: ${{ secrets.test_pypi_password }}
-#          repository_url: https://test.pypi.org/legacy/
-
-      - name: Publish distribution 📦 to PyPI
+      - name: Publish to Test PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
-          user: __token__
-          password: ${{ secrets.pypi_password }}
+          repository-url: https://test.pypi.org/legacy/
+          skip-existing: true
+          attestations: true
+
+      - name: Clean existing attestations
+        run: rm -f dist/*.intoto.jsonl
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          skip-existing: true
+          attestations: true