Use Trusted Publishers to publish to PyPi

SukiCZ · Jan 25, 2024 · 51080e8 · 51080e8
1 parent 661a509
commit 51080e8
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -60,6 +60,11 @@ jobs:
     runs-on: ubuntu-latest
     needs: [linter, test]
     if: startsWith(github.ref, 'refs/tags/v')
+    # Specifying a GitHub environment is optional, but strongly encouraged
+    environment: release
+    permissions:
+      # IMPORTANT: this permission is mandatory for trusted publishing
+      id-token: write
     steps:
     - uses: actions/[email protected]
     - name: Set up Python
@@ -79,5 +84,3 @@ jobs:
         --outdir dist/
     - name: Build and publish 📦 to PyPI
       uses: pypa/[email protected]
-      with:
-        password: ${{ secrets.PYPI_API_TOKEN }}