Setup Trusted Publishing in GHA

python-rope · Mar 12, 2024 · 12360fb · 12360fb
1 parent 8fab1b7
commit 12360fb
Showing 1 changed file with 4 additions and 5 deletions.
diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml
@@ -14,9 +14,10 @@ on:
 
 jobs:
  deploy:
-
  runs-on: ubuntu-latest
-
+ environment: publishing
+ permissions:
+ id-token: write
  steps:
  - uses: actions/checkout@v2
  - name: Set up Python
@@ -33,6 +34,4 @@ jobs:
  if: startsWith(github.ref, 'refs/tags')
  uses: pypa/gh-action-pypi-publish@27b31702a0e7fc50959f5ad993c78deac1bdfc29
  with:
- user: __token__
- password: ${{ secrets.PYPI_API_TOKEN }}
- repository_url: https://test.pypi.org/legacy/
+ repository-url: https://test.pypi.org/legacy/