Merge pull request #148 from Skyscanner/trusted-publishers

update pypi-release.yml file to configure trusted publishers
Skyscanner · Aug 29, 2024 · 812f4c4 · 812f4c4
2 parents 682133b + 470e61b
commit 812f4c4
Show file tree

Hide file tree

Showing 3 changed files with 112 additions and 34 deletions.
diff --git a/.github/workflows/pypi-release.yml b/.github/workflows/pypi-release.yml
@@ -6,8 +6,13 @@ on:
 
 jobs:
   build:
+    name: Upload release to PyPI
     runs-on: ubuntu-latest
-
+    environment:
+      name: pypi
+      url: https://pypi.org/p/pycfmodel
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v4
 
@@ -25,5 +30,3 @@ jobs:
 
       - name: Publish distribution 📦 to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          password: ${{ secrets.pypi_password }}