From 210b64cbb7bcc9d510f04549d1a868813f380ea3 Mon Sep 17 00:00:00 2001 From: Duncan Ogilvie Date: Sat, 28 Dec 2024 13:51:39 +0100 Subject: [PATCH] Switch to trusted publishing for PyPI --- .github/workflows/CI.yml | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/.github/workflows/CI.yml b/.github/workflows/CI.yml index d066205..f7abb9a 100644 --- a/.github/workflows/CI.yml +++ b/.github/workflows/CI.yml @@ -141,6 +141,7 @@ jobs: permissions: contents: write discussions: write + id-token: write steps: - name: Download wheels uses: actions/download-artifact@v4 @@ -151,9 +152,6 @@ jobs: - name: Publish to PyPI uses: pypa/gh-action-pypi-publish@67339c736fd9354cd4f8cb0b744f2b82a74b5c70 # v1.12.13 - with: - password: ${{ secrets.PYPI_API_TOKEN }} - packages-dir: dist/ - name: Release uses: softprops/action-gh-release@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8 # v2.0.9