Use OIDC for PyPI release

Signed-off-by: Jordan Borean <jborean93@gmail.com>
pythongssapi · May 31, 2023 · 86e9957 · 86e9957
1 parent b15b139
commit 86e9957
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 5 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -251,6 +251,10 @@ jobs:
     - windows
 
     runs-on: ubuntu-latest
+    permissions:
+      # IMPORTANT: this permission is mandatory for trusted publishing
+      id-token: write
+
     steps:
     - name: Check out code
       uses: actions/checkout@v3
@@ -323,7 +327,4 @@ jobs:
 
     - name: Deploy to PyPI
       if: startsWith(github.ref, 'refs/tags/v')
-      uses: pypa/gh-action-pypi-publish@v1.5.1
-      with:
-        user: __token__
-        password: ${{ secrets.pypi_password }}
+      uses: pypa/gh-action-pypi-publish@release/v1
diff --git a/docs/source/conf.py b/docs/source/conf.py
@@ -316,7 +316,7 @@
 
 
 # Example configuration for intersphinx: refer to the Python standard library.
-intersphinx_mapping = {'http://docs.python.org/': None}
+intersphinx_mapping = {'python': ('http://docs.python.org/', None)}
 
 # which docstring to use for the class
 # can be 'class', 'init', or 'both'