From 9ea7222ef3f184480be0d0884e30ccfb4172b17b Mon Sep 17 00:00:00 2001 From: David Lord Date: Wed, 10 Jan 2024 15:01:45 -0800 Subject: [PATCH] use trusted publishing --- .github/workflows/publish.yaml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 04527b7ad..0000815a1 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -58,12 +58,14 @@ jobs: # files in the draft release. environment: 'publish' runs-on: ubuntu-latest + permissions: + id-token: write steps: - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a - uses: pypa/gh-action-pypi-publish@2f6f737ca5f74c637829c0f5c3acd0e29ea5e8bf with: - repository_url: https://test.pypi.org/legacy/ - packages_dir: artifact/ + repository-url: https://test.pypi.org/legacy/ + packages-dir: artifact/ - uses: pypa/gh-action-pypi-publish@2f6f737ca5f74c637829c0f5c3acd0e29ea5e8bf with: - packages_dir: artifact/ + packages-dir: artifact/