Use PyPI trusted publishers (#459)

ott-jax · Nov 9, 2023 · 47b8bc7 · 47b8bc7
1 parent f139415
commit 47b8bc7
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 5 deletions.
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
@@ -1,4 +1,4 @@
-name: lint
+name: Lint
 
 on:
   schedule:

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -1,4 +1,4 @@
-name: Upload Python Package
+name: Upload package
 
 on:
   release:
@@ -7,6 +7,10 @@ on:
 jobs:
   deploy:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+    environment: publish-pypi
+
     steps:
     - uses: actions/checkout@v3
     - name: Set up Python 3.10
@@ -22,8 +26,9 @@ jobs:
     - name: Build package
       run: tox -e build-package
 
-    - name: Publish package
+    - name: Publish package on PyPI
       uses: pypa/gh-action-pypi-publish@release/v1
       with:
-        password: ${{ secrets.PYPI_API_TOKEN }}
+        skip-existing: true
+        verify-metadata: true
         verbose: true
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
@@ -1,4 +1,4 @@
-name: tests
+name: Tests
 
 on:
   schedule: