use PyPI trusted publishing

tqdm · Feb 10, 2024 · e9f0c05 · e9f0c05
1 parent 7323d5b
commit e9f0c05
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -111,6 +111,8 @@ jobs:
   deploy:
     needs: [check, test]
     runs-on: ubuntu-latest
+    environment: pypi
+    permissions: {contents: write, id-token: write, packages: write}
     steps:
     - uses: actions/checkout@v4
       with:
@@ -127,7 +129,6 @@ jobs:
     - id: dist
       uses: casperdcl/deploy-pypi@v2
       with:
-        password: ${{ secrets.PYPI_TOKEN }}
         gpg_key: ${{ secrets.GPG_KEY }}
         upload: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags') }}
     - id: collect_assets