use PyPI trusted publishing

casperdcl · Oct 6, 2024 · 415bd1d · 415bd1d
1 parent bb094f3
commit 415bd1d
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -54,6 +54,8 @@ jobs:
     name: Deploy
     needs: test
     runs-on: ubuntu-latest
+    environment: pypi
+    permissions: {contents: write, id-token: write, packages: write}
     steps:
     - uses: actions/checkout@v4
       with: {fetch-depth: 0}
@@ -68,7 +70,6 @@ jobs:
     - id: dist
       uses: casperdcl/deploy-pypi@v2
       with:
-        password: ${{ secrets.TWINE_PASSWORD }}
         gpg_key: ${{ secrets.GPG_KEY }}
         upload: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags') }}
     - id: collect_assets