Use trusted publishing token (#862)

This commit is contained in:
Jesse Hills 2024-04-17 10:26:39 +12:00 committed by GitHub
parent 725e501815
commit 0ad9dd5aa5
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 4 additions and 4 deletions

View File

@ -58,11 +58,11 @@ jobs:
id-token: write id-token: write
if: github.event_name == 'release' && github.event.action == 'published' if: github.event_name == 'release' && github.event.action == 'published'
steps: steps:
- uses: actions/download-artifact@v3 - name: Download artifacts
uses: actions/download-artifact@v3
with: with:
name: artifact name: artifact
path: dist path: dist
- uses: pypa/gh-action-pypi-publish@release/v1 - name: Publish to PyPI
with: uses: pypa/gh-action-pypi-publish@v1.8.14
password: ${{ secrets.PYPI_TOKEN }}