Update pypi publish method

ThePorgs · Dec 19, 2023 · 6a0d2e6 · 6a0d2e6
1 parent 02bca4a
commit 6a0d2e6
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 4 deletions.
diff --git a/.github/workflows/entrypoint_nightly.yml b/.github/workflows/entrypoint_nightly.yml
@@ -15,6 +15,10 @@ jobs:
   build-n-publish:
     name: Build and publish Python 🐍 distributions to TestPyPI 📦
     runs-on: ubuntu-latest
+    environment: nightly
+    permissions:
+      # IMPORTANT: this permission is mandatory for trusted publishing
+      id-token: write
     needs: test
     steps:
       - uses: actions/checkout@master
@@ -33,6 +37,5 @@ jobs:
       - name: Publish distribution 📦 to Test PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
-          password: ${{ secrets.TEST_PYPI_API_TOKEN }}
           repository-url: https://test.pypi.org/legacy/
           skip-existing: true
diff --git a/.github/workflows/entrypoint_release.yml b/.github/workflows/entrypoint_release.yml
@@ -13,6 +13,10 @@ jobs:
   build-n-publish:
     name: Build and publish Python 🐍 distributions to PyPI 📦
     runs-on: ubuntu-latest
+    environment: release
+    permissions:
+      # IMPORTANT: this permission is mandatory for trusted publishing
+      id-token: write
     needs: test
     steps:
       - uses: actions/checkout@master
@@ -31,10 +35,7 @@ jobs:
       - name: Publish distribution 📦 to Test PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
-          password: ${{ secrets.TEST_PYPI_API_TOKEN }}
           repository-url: https://test.pypi.org/legacy/
           skip-existing: true
       - name: Publish distribution 📦 to PyPI (prod)
         uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          password: ${{ secrets.PYPI_API_TOKEN }}