googleapis
diff --git a/‎synthtool/gcp/templates/python_library/.kokoro/release/common.cfg
Copy file name to clipboardExpand all lines: synthtool/gcp/templates/python_library/.kokoro/release/common.cfg
+9Lines changed: 9 additions & 0 deletions b/‎synthtool/gcp/templates/python_library/.kokoro/release/common.cfg
Copy file name to clipboardExpand all lines: synthtool/gcp/templates/python_library/.kokoro/release/common.cfg
+9Lines changed: 9 additions & 0 deletions
@@ -38,3 +38,12 @@ env_vars: {
   key: "SECRET_MANAGER_KEYS"
   value: "releasetool-publish-reporter-app,releasetool-publish-reporter-googleapis-installation,releasetool-publish-reporter-pem"
 }
+
+# Store the packages we uploaded to PyPI.  That way, we have a record of exactly
+# what we published, which we can use to generate SBOMs and attestations.
+action {
+  define_artifacts {
+    regex: "github/{{ metadata['repo']['repo'].split('/')[1] }}/**/*.tar.gz"
+    strip_prefix: "github/{{ metadata['repo']['repo'].split('/')[1] }}"
+  }
+}