Merge pull request #52 from siemens/chore/oidc-publishing

chore(ci): use trusted OIDC publishing
siemens · Oct 3, 2024 · c8f6041 · c8f6041
2 parents e918caa + 53a1385
commit c8f6041
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -11,13 +11,15 @@ env:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v4
         with:
           python-version: "3.11"
       - uses: abatilo/actions-poetry@v2
-      - name: Publish package
-        run: |
-          poetry install -n --no-dev
-          poetry publish --build -u __token__ -p ${{ secrets.PYPI_SECRET }}
+      - name: Build package
+        run: poetry build
+      - name: Publish package to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1