ci: use trusted publishing

rasg-affiliates · Jan 19, 2024 · 98bc087 · 98bc087
1 parent b0946b0
commit 98bc087
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
@@ -11,6 +11,8 @@ jobs:
     env:
       ENV_NAME: publish
       PYTHON: "3.10"
+    permissions:
+      id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
     steps:
       - uses: actions/checkout@main
         with:
@@ -30,6 +32,3 @@ jobs:
 
       - name: Publish to PyPI
         uses: pypa/[email protected]
-        with:
-          user: __token__
-          password: ${{ secrets.pypi_password }}