From 041c93f2c23b7ea2fc1bdbdc75d3663cdd08e6dd Mon Sep 17 00:00:00 2001
From: ddelange <14880945+ddelange@users.noreply.github.com>
Date: Sun, 7 Apr 2024 15:29:55 +0300
Subject: [PATCH] Switch to trusted publishing (#10)

* Switch to trusted publishing

* Bring back skip_existing: true
---
 .github/workflows/build.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 2439ced..244685d 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -97,6 +97,8 @@ jobs:
     runs-on: ubuntu-latest
     # upload to PyPI on master
     if: github.event_name == 'push' && github.ref == 'refs/heads/master'
+    permissions:
+      id-token: write  # pypa/gh-action-pypi-publish
     steps:
       - uses: actions/download-artifact@v4
         with:
@@ -106,5 +108,4 @@ jobs:
 
       - uses: pypa/gh-action-pypi-publish@release/v1
         with:
-          password: ${{ secrets.PYPI_PASSWORD }}
           skip_existing: true