diff --git a/.github/workflows/pypi_release.yml b/.github/workflows/pypi_release.yml
index 4da6a1a26d..5a6c274a72 100644
--- a/.github/workflows/pypi_release.yml
+++ b/.github/workflows/pypi_release.yml
@@ -14,6 +14,11 @@ on:
     name: Publish Python packages on PyPI
     needs: [build-sdist, build-wheels]
     runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/openvdb
+    permissions:
+      id-token: write
     steps:
       - name:   Download artifacts from commit ${{ github.sha }}
         uses: dawidd6/action-download-artifact@v2
@@ -28,15 +33,11 @@ on:
         uses: pypa/gh-action-pypi-publish@release/v1
         if: ${{ inputs.test_pypi }}
         with:
-          user: __token__
-          password: ${{ secrets.TEST_PYPI_API_TOKEN }}
-          repository_url: https://test.pypi.org/legacy/
+          repository-url: https://test.pypi.org/legacy/
           packages_dir: dist
 
       - name: 🎉 Publish to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
         if: ${{ !inputs.test_pypi }}
         with:
-          user: __token__
-          password: ${{ secrets.PYPI_API_TOKEN }}
           packages_dir: dist
diff --git a/openvdb/openvdb/python/pyproject.toml b/openvdb/openvdb/python/pyproject.toml
index 1f66f383ab..7ce8bfc9aa 100644
--- a/openvdb/openvdb/python/pyproject.toml
+++ b/openvdb/openvdb/python/pyproject.toml
@@ -39,3 +39,13 @@ cmake.minimum-version = "3.18"
 [tool.scikit-build.cmake.define]
 OPENVDB_BUILD_CORE = "ON"
 USE_NUMPY = "ON"
+
+[tool.cibuildwheel]
+manylinux-x86_64-image = "manylinux2014"
+manylinux-i686-image = "manylinux2014"
+manylinux-aarch64-image = "manylinux2014"
+manylinux-ppc64le-image = "manylinux2014"
+manylinux-s390x-image = "manylinux2014"
+manylinux-pypy_x86_64-image = "manylinux2014"
+manylinux-pypy_i686-image = "manylinux2014"
+manylinux-pypy_aarch64-image = "manylinux2014"