workflows/release: use trusted publishing

Signed-off-by: William Woodruff <[email protected]>
trailofbits · Mar 6, 2024 · 4d5dbc2 · 4d5dbc2
1 parent 0ce6423
commit 4d5dbc2
Showing 1 changed file with 1 addition and 4 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -26,16 +26,13 @@ jobs:
         cache-dependency-path: pyproject.toml
 
     - name: deps
-      run: python -m pip install -U setuptools build wheel
+      run: python -m pip install -U build
 
     - name: build
       run: python -m build
 
     - name: publish
       uses: pypa/gh-action-pypi-publish@release/v1
-      with:
-        user: __token__
-        password: ${{ secrets.PYPI_TOKEN }}
 
     - name: sign
       uses: sigstore/[email protected]