Merge pull request #203 from akrherz/gh200_pypi_trusted

akrherz · web-flow · commit de36264a6ecf · 2026-03-20T09:07:28.000-05:00
CI: Use pypi trusted publisher for release
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -9,23 +9,29 @@ on:
 
 jobs:
   deploy:
-
+    environment: pypi
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
 
     steps:
     - uses: actions/checkout@v6
+
     - name: Set up Python
       uses: actions/setup-python@v6
       with:
         python-version: '3.x'
+
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip
-        python -m pip install build twine
-    - name: Build and publish
-      env:
-        TWINE_USERNAME: __token__
-        TWINE_PASSWORD: ${{ secrets.PYPI_TOKEN }}
+        python -m pip install build
+
+    - name: Build package
       run: |
         python -m build
-        twine upload dist/*
+
+    - name: Publish package distributions to PyPI
+      uses: pypa/gh-action-pypi-publish@release/v1
+
