Add a publish workflow

This will allow trusted publishing to PyPI.

.github/workflows/publish.yml

@@ -0,0 +1,38 @@
+name: Publish
+on:
+ push:
+ tags:
+ - '*'
+jobs:
+ build:
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@v3
+
+ - uses: actions/setup-python@v3
+ with:
+ python-version: 3.11
+
+ - run: |
+ pip install poetry
+ poetry build
+ - uses: actions/upload-artifact@v3
+ with:
+ path: ./dist
+
+ pypi-publish:
+ needs: ['build']
+ environment: 'publish'
+
+ name: upload release to PyPI
+ runs-on: ubuntu-latest
+ permissions:
+ # IMPORTANT: this permission is mandatory for trusted publishing
+ id-token: write
+ steps:
+ - uses: actions/download-artifact@v3
+
+ - name: Publish package distributions to PyPI
+ uses: pypa/gh-action-pypi-publish@release/v1
+ with:
+ packages_dir: artifact/