ci: publish to pypi using trusted publishing

malwarefrank · Sep 9, 2023 · b837ad6 · b837ad6
1 parent 34d58da
commit b837ad6
Showing 1 changed file with 4 additions and 5 deletions.
diff --git a/.github/workflows/publish-to-pypi.yml b/.github/workflows/publish-to-pypi.yml
@@ -8,10 +8,12 @@ jobs:
  build-n-publish:
  name: Build and publish Python distributions to PyPI and TestPyPI
  runs-on: ubuntu-latest
+ permissions:
+ id-token: write
  steps:
- - uses: actions/checkout@master
+ - uses: actions/checkout@v4
  - name: Set up Python 3.8
- uses: actions/setup-python@v3
+ uses: actions/setup-python@v4
  with:
  python-version: "3.8"
  - name: Install pypa/build
@@ -31,9 +33,6 @@ jobs:
  - name: Publish distribution to Test PyPI
  uses: pypa/gh-action-pypi-publish@release/v1
  with:
- password: ${{ secrets.TEST_PYPI_TOKEN }}
  repository-url: https://test.pypi.org/legacy/
  - name: Publish distribution to PyPI
  uses: pypa/gh-action-pypi-publish@release/v1
- with:
- password: ${{ secrets.PYPI_TOKEN }}