ci: pypi trusted publisher

deargen · Dec 12, 2024 · 5709589 · 5709589
1 parent 677b769
commit 5709589
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/.github/workflows/build_and_release.yml b/.github/workflows/build_and_release.yml
@@ -137,6 +137,8 @@ jobs:
     if: ${{ github.event.inputs.dry-run == 'false' }}
     runs-on: ubuntu-24.04
     needs: [commit-changelog-and-release-github]
+    permissions:
+      id-token: write
     steps:
       - uses: actions/download-artifact@v4
         with:
@@ -145,5 +147,4 @@ jobs:
       - name: Build and upload to PyPI
         run: |
           pip install uv --break-system-packages
-          uv tool install twine
-          twine upload dist/* -u __token__ -p ${{ secrets.PYPI_API_TOKEN }} --non-interactive
+          uv publish