Release OIDC authentication

.github/workflows/release.yml

@@ -9,16 +9,17 @@ on:
 jobs:
   build-and-publish:
     runs-on: ubuntu-20.04
+    environment: release
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v2
       - name: Set up Python
         uses: actions/setup-python@v2
         with:
-          python-version: '3.10'
+          python-version: '3.11'
       - name: Install Poetry
-        uses: abatilo/[email protected]
-        with:
-          poetry-version: '1.3'
+        run: pipx install poetry
       - name: Verify versioning
         run: |
           [ "$(poetry version -s)" == "${GITHUB_REF#refs/tags/v}" ]
@@ -28,14 +29,11 @@ jobs:
         run: poetry run pytest
       - name: Build packages
         run: poetry build
-      - name: Configure Poetry
-        run: |
-          poetry config repositories.testpypi https://test.pypi.org/legacy/
-          poetry config pypi-token.testpypi ${{ secrets.TEST_PYPI_API_TOKEN }}
-          poetry config pypi-token.pypi "${{ secrets.PYPI_API_TOKEN }}"
       - name: Publish to test PyPI
         if: ${{ github.event_name == 'push' }}
-        run: poetry publish -r testpypi
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          repository-url: https://test.pypi.org/legacy/
       - name: Publish to PyPI
         if: ${{ github.event_name == 'release' }}
-        run: poetry publish
+        uses: pypa/gh-action-pypi-publish@release/v1

pyproject.toml

@@ -2,6 +2,7 @@
 name = "pysigma-pipeline-windows"
 version = "1.1.1"
 description = "pySigma Windows processing pipelines"
+readme = "README.md"
 authors = ["frack113 <[email protected]>"]
 license = "LGPL-2.1-only"
 repository = "https://github.com/SigmaHQ/pySigma-pipeline-windows"