Merge pull request #15 from iterative/pypi-trusted-publishers

Migrate from PyPI tokens to Trusted Publishers
iterative · Sep 12, 2023 · aa81a18 · aa81a18
2 parents c30591b + 1a1bd31
commit aa81a18
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -9,6 +9,10 @@ permissions:
 
 jobs:
   pip:
+    environment: pypi
+    permissions:
+      contents: read
+      id-token: write
     runs-on: ubuntu-20.04
     steps:
     - uses: actions/checkout@v3
@@ -27,6 +31,3 @@ jobs:
         twine check dist/*
     - name: Publish packages to PyPI
       uses: pypa/gh-action-pypi-publish@master
-      with:
-        user: __token__
-        password: ${{ secrets.PYPI_TOKEN }}