ci: use trusted publishing

samypr100 · Dec 18, 2023 · 02f80b0 · 02f80b0
1 parent cab0ca1
commit 02f80b0
Showing 1 changed file with 2 additions and 7 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -129,17 +129,14 @@ jobs:
 
   deploy:
     runs-on: ubuntu-latest
-    if: github.event_name == 'release'
     needs:
       - build
+    if: github.event_name == 'release'
+    environment: release
     permissions:
       contents: write
       id-token: write
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v4
-        with:
-          python-version: "3.10"
       - uses: actions/download-artifact@v3
         with:
           name: build-${{ github.sha }}
@@ -153,5 +150,3 @@ jobs:
           gh release upload "${{ github.ref_name }}" dist/*.whl
       - name: Publish package distributions to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          password: ${{ secrets.PYPI_API_TOKEN }}