Switch to trusted publishing (#10)

* Switch to trusted publishing * Bring back skip_existing: true
alesanfra · Apr 7, 2024 · 041c93f · 041c93f
1 parent cf08c77
commit 041c93f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -97,6 +97,8 @@ jobs:
     runs-on: ubuntu-latest
     # upload to PyPI on master
     if: github.event_name == 'push' && github.ref == 'refs/heads/master'
+    permissions:
+      id-token: write  # pypa/gh-action-pypi-publish
     steps:
       - uses: actions/download-artifact@v4
         with:
@@ -106,5 +108,4 @@ jobs:
 
       - uses: pypa/gh-action-pypi-publish@release/v1
         with:
-          password: ${{ secrets.PYPI_PASSWORD }}
           skip_existing: true