* Update action.yml to verify artifact attestations

* Update action.yml to add GH_TOKEN

* Update action.yml

* Update action.yml

* Update action.yml

* Update action.yml

* fix: create virtual env then verify attestations

Co-authored-by: shenxianpeng <3353385+shenxianpeng@users.noreply.github.com>

Co-authored-by: shenxianpeng <3353385+shenxianpeng@users.noreply.github.com>

Bumps [commit-check](https://github.com/commit-check/commit-check) from 0.9.5 to 0.9.6.
- [Release notes](https://github.com/commit-check/commit-check/releases)
- [Commits](commit-check/commit-check@v0.9.5...v0.9.6)

---
updated-dependencies:
- dependency-name: commit-check
  dependency-version: 0.9.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [commit-check](https://github.com/commit-check/commit-check) from 0.9.9 to 0.10.0.
- [Release notes](https://github.com/commit-check/commit-check/releases)
- [Commits](commit-check/commit-check@v0.9.9...v0.10.0)

---
updated-dependencies:
- dependency-name: commit-check
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [commit-check](https://github.com/commit-check/commit-check) from 0.10.0 to 0.10.1.
- [Release notes](https://github.com/commit-check/commit-check/releases)
- [Commits](commit-check/commit-check@v0.10.0...v0.10.1)

---
updated-dependencies:
- dependency-name: commit-check
  dependency-version: 0.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* docs: update README.md to fix gramer

* docs: update README.md

* chore(deps): bump pygithub from 2.6.1 to 2.7.0

Bumps [pygithub](https://github.com/pygithub/pygithub) from 2.6.1 to 2.7.0.
- [Release notes](https://github.com/pygithub/pygithub/releases)
- [Changelog](https://github.com/PyGithub/PyGithub/blob/main/doc/changes.rst)
- [Commits](PyGithub/PyGithub@v2.6.1...v2.7.0)

---
updated-dependencies:
- dependency-name: pygithub
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix: change wheel package name to pygithub

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: shenxianpeng <xianpeng.shen@gmail.com>