use trusted

Signed-off-by: Tamar Galer <tamar@ox.security>

.github/workflows/publish.yml

@@ -5,15 +5,19 @@ on:
     types: [ published ]
 
 jobs:
-  publish-service-client-package:
+  pypi-publish:
+    name: upload release to PyPI
     runs-on: ubuntu-latest
+    environment: release
     permissions:
-      contents: write
+      id-token: write
     steps:
-      - name: Publish PyPi package
-        uses: code-specialist/pypi-poetry-publish@v1
+      - uses: actions/checkout@v2
+      - uses: actions/setup-python@v2
         with:
-          PACKAGE_DIRECTORY: "./maskerlogger/"
-          PYTHON_VERSION: "3.11"
-          ACCESS_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          PUBLISH_REGISTRY_PASSWORD: ${{ secrets.PUBLISH_REGISTRY_PASSWORD }}
+          python-version: '3.x'
+      - run: python -m pip install --upgrade pip
+      - run: pip install poetry
+      - run: poetry build
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1