Merge pull request #122 from AllenCellModeling/fix/publish-pypi

update pypi publish step for trusted publishing
AllenCellModeling · Jul 9, 2024 · 895ed99 · 895ed99
2 parents 4f52758 + a4e6e29
commit 895ed99
Showing 1 changed file with 4 additions and 5 deletions.
diff --git a/.github/workflows/py-build-main.yml b/.github/workflows/py-build-main.yml
@@ -121,8 +121,10 @@ jobs:
     name: Upload if release
     needs: [build_wheels, build_sdist]
     runs-on: ubuntu-latest
+    permissions:
+      # IMPORTANT: this permission is mandatory for trusted publishing
+      id-token: write
     if: "contains(github.event.head_commit.message, 'Bump version')"
-
     steps:
       - uses: actions/setup-python@v5
 
@@ -132,7 +134,4 @@ jobs:
           path: dist
           merge-multiple: true
 
-      - uses: pypa/[email protected]
-        with:
-          user: aicspypi
-          password: ${{ secrets.PYPI_TOKEN }}
+      - uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0