Use pypa/gh-actions-pypi-publish for trusted publishing

hibtc · Dec 27, 2024 · 54c1dde · 54c1dde
1 parent 7c2b2fa
commit 54c1dde
Showing 1 changed file with 6 additions and 11 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -374,11 +374,12 @@ jobs:
     runs-on: ubuntu-latest
     if: startsWith(github.ref, 'refs/tags/v')
 
-    steps:
-      - uses: actions/setup-python@v5
-        with:
-          python-version: '3.x'
+    environment:
+      name: pypi
+    permissions:
+      id-token: write
 
+    steps:
       - name: Fetch built distributions
         uses: actions/download-artifact@v4
         with:
@@ -389,14 +390,8 @@ jobs:
           mv dist/dist-*/*.whl dist/
           mv dist/dist-linux-manylinux2014_x86_64/*.tar.gz dist/
 
-      - name: Install twine
-        run: pip install twine
-
       - name: Publish PyPI package
-        env:
-          TWINE_USERNAME: __token__
-          TWINE_PASSWORD: ${{ secrets.PYPI_TOKEN }}
-        run: twine upload dist/*.whl dist/*.tar.gz
+        uses: pypa/gh-action-pypi-publish@release/v1
 
       - name: Create GitHub Release
         uses: softprops/action-gh-release@v2