implement trusted publishing

hainegroup · May 5, 2023 · 59dbf1d · 59dbf1d
1 parent 3858c33
commit 59dbf1d
Showing 1 changed file with 7 additions and 3 deletions.
diff --git a/.github/workflows/pypi.yml b/.github/workflows/pypi.yml
@@ -12,6 +12,13 @@ on:
 jobs:
   packages:
     runs-on: ubuntu-latest
+
+    environment:
+      name: pypi
+      url: https://pypi.org/p/oceanspy
+    permissions:
+      id-token: write
+
     steps:
     - uses: actions/checkout@v3
 
@@ -47,6 +54,3 @@ jobs:
     - name: Publish a Python distribution to PyPI
       if: success() && github.event_name == 'release'
       uses: pypa/gh-action-pypi-publish@release/v1
-      with:
-        user: __token__
-        password: ${{ secrets.PYPI_API_TOKEN }}