Use trusted publisher to publish to PyPI

pyinat · May 31, 2023 · 4c09268 · 4c09268
1 parent 0b91cf3
commit 4c09268
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
@@ -146,6 +146,8 @@ jobs:
   release-pypi-package:
     if: startsWith(github.ref, 'refs/tags/v') || github.event.inputs.pre-release-suffix
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-python@v4
@@ -164,7 +166,7 @@ jobs:
           poetry version $(poetry version -s).${{ env.pre-release-suffix }}${{ env.pre-release-version }}
           poetry version
 
-      - name: Build and publish to pypi
-        run: |
-          poetry build
-          poetry publish -u  __token__ -p ${{ secrets.PYPI_TOKEN }}
+      - name: Build package distributions
+        run: poetry build
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1