From de1f35fd3540011a2904d5f75a6808a4e0703759 Mon Sep 17 00:00:00 2001
From: Thomas Patzke <thomas@patzke.org>
Date: Sun, 3 Sep 2023 01:37:02 +0200
Subject: [PATCH] Release OIDC authentication

---
 .github/workflows/release.yml | 20 +++++++++-----------
 pyproject.toml                |  1 +
 2 files changed, 10 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 73d4c6b..fb063d5 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,16 +9,17 @@ on:
 jobs:
   build-and-publish:
     runs-on: ubuntu-20.04
+    environment: release
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v2
       - name: Set up Python
         uses: actions/setup-python@v2
         with:
-          python-version: '3.10'
+          python-version: '3.11'
       - name: Install Poetry
-        uses: abatilo/actions-poetry@v2.0.0
-        with:
-          poetry-version: '1.3'
+        run: pipx install poetry
       - name: Verify versioning
         run: |
           [ "$(poetry version -s)" == "${GITHUB_REF#refs/tags/v}" ]
@@ -28,14 +29,11 @@ jobs:
         run: poetry run pytest
       - name: Build packages
         run: poetry build
-      - name: Configure Poetry
-        run: |
-          poetry config repositories.testpypi https://test.pypi.org/legacy/
-          poetry config pypi-token.testpypi ${{ secrets.TEST_PYPI_API_TOKEN }}
-          poetry config pypi-token.pypi "${{ secrets.PYPI_API_TOKEN }}"
       - name: Publish to test PyPI
         if: ${{ github.event_name == 'push' }}
-        run: poetry publish -r testpypi
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          repository-url: https://test.pypi.org/legacy/
       - name: Publish to PyPI
         if: ${{ github.event_name == 'release' }}
-        run: poetry publish
\ No newline at end of file
+        uses: pypa/gh-action-pypi-publish@release/v1
\ No newline at end of file
diff --git a/pyproject.toml b/pyproject.toml
index 556943f..9d9ed8d 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -2,6 +2,7 @@
 name = "pysigma-pipeline-windows"
 version = "1.1.1"
 description = "pySigma Windows processing pipelines"
+readme = "README.md"
 authors = ["frack113 <frack113@users.noreply.github.com>"]
 license = "LGPL-2.1-only"
 repository = "https://github.com/SigmaHQ/pySigma-pipeline-windows"