Merge pull request #44 from icub-tech-iit/traversaro-patch-1

Fix pypi-publish action release name and Actions parameters
icub-tech-iit · Oct 31, 2024 · 5e92615 · 5e92615
2 parents e7dc050 + bf7b519
commit 5e92615
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/.github/workflows/pypi-ci.yml b/.github/workflows/pypi-ci.yml
@@ -46,6 +46,11 @@ jobs:
     runs-on: ubuntu-24.04
     needs: [build_wheels]
     if: startsWith(github.ref, 'refs/tags')
+    # Specifying a GitHub environment is optional, but strongly encouraged
+    environment: release
+    permissions:
+      # IMPORTANT: this permission is mandatory for trusted publishing
+      id-token: write
     steps:
       - name: Download artifacts
         uses: actions/download-artifact@v4
@@ -54,6 +59,4 @@ jobs:
           path: dist
 
       - name: Publish distribution 📦 to PyPI
-        uses: pypa/gh-action-pypi-publish@v1
-        with:
-          password: ${{ secrets.PYPI_API_TOKEN }}
+        uses: pypa/gh-action-pypi-publish@release/v1