publish with OpenID

Signed-off-by: Zhiyuan Chen <[email protected]>
ZhiyuanChen · Mar 25, 2024 · e1baf5e · e1baf5e
1 parent 54f92b6
commit e1baf5e
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/.github/workflows/push.yaml b/.github/workflows/push.yaml
@@ -82,6 +82,9 @@ jobs:
     if: startsWith(github.event.ref, 'refs/tags/v')
     needs: [lint, test]
     environment: pypi
+    permissions:
+      contents: write
+      id-token: write
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
@@ -102,8 +105,6 @@ jobs:
             dist/*
       - name: publish to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          password: ${{ secrets.PYPI_API_TOKEN }}
   develop:
     if: contains(fromJson('["refs/heads/master", "refs/heads/main"]'), github.ref)
     needs: [lint, test]