From bc317ca6f043331fc900e52bd17b791928b5a6aa Mon Sep 17 00:00:00 2001 From: Max Bachmann Date: Thu, 28 Dec 2023 22:17:03 +0100 Subject: [PATCH] use trusted publisher --- .github/workflows/releasebuild.yml | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/.github/workflows/releasebuild.yml b/.github/workflows/releasebuild.yml index f6681ab4..95a89c8b 100644 --- a/.github/workflows/releasebuild.yml +++ b/.github/workflows/releasebuild.yml @@ -215,14 +215,13 @@ jobs: needs: [build_wheels_windows, build_wheels_macos, build_wheels_linux, build_sdist] name: deploy wheels to pypi runs-on: ubuntu-latest - + environment: pypi-release + permissions: + id-token: write steps: - uses: actions/download-artifact@v3 with: name: artifact path: dist - - uses: pypa/gh-action-pypi-publish@v1.8.1 - with: - user: __token__ - password: ${{ secrets.pypi_password }} + - uses: pypa/gh-action-pypi-publish@v1