add id-token permissions for trusted publish to pypi (#2586)

* add id-token permissions for trusted publish to pypi * replace publish action * add pypa to cspell dictionary
rackspace · Sep 12, 2024 · 3d53555 · 3d53555
1 parent 4bf15fa
commit 3d53555
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -40,6 +40,11 @@ jobs:
     needs:
       - build-pypi
     runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/project/runway
+    permissions:
+      id-token: write
     steps:
       - name: ⤵️ Check out code from GitHub (complete)
         uses: actions/checkout@v4
@@ -56,9 +61,7 @@ jobs:
           poetry-install: false
           poetry-plugins: poetry-dynamic-versioning[plugin]
       - name: 🚀 Publish Distribution 📦 to PyPI
-        env:
-          POETRY_PYPI_TOKEN_PYPI: ${{ secrets.pypi_password }}
-        run: poetry publish
+        run: pypa/gh-action-pypi-publish@v1.10.1
   notify-on-publish:
     name: Notify
     needs:

diff --git a/.vscode/dictionaries/pypi.txt b/.vscode/dictionaries/pypi.txt
@@ -20,6 +20,7 @@ prettytable
 pydantic
 pydocstyle
 pyhcl
+pypa
 pywin
 pyyaml
 runpy