Trusted publishing exchange failure: OpenID Connect token retrieval failed: GitHub: missing or insufficient OIDC token permissions, the ACTIONS_ID_TOKEN_REQUEST_TOKEN environment variable was unset The workflow context indicates that this action was called from a pull request on a fork. GitHub doesn't give these workflows OIDC permissions, even if `id-token: write` is explicitly configured. To fix this, change your publishing workflow to use an event that forks of your repository cannot trigger (such as tag or release creation, or a manually triggered workflow dispatch).

actions/checkout@master, actions/setup-python@v3, and pypa/gh-action-pypi-publish@release/v1 are not allowed to be used in RAMP-project/RAMP. Actions in this workflow must be: within a repository owned by RAMP-project.