chore: use trusted publishing for pypi

lepture · Aug 30, 2024 · a6498ac · a6498ac
1 parent 9d01fb8
commit a6498ac
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/.github/workflows/pypi.yml b/.github/workflows/pypi.yml
@@ -2,6 +2,7 @@ name: Release theme to PyPI
 
 permissions:
   contents: write
+  id-token: write
 
 on:
   push:
@@ -44,6 +45,7 @@ jobs:
   publish:
     environment:
       name: pypi-release
+      url: https://pypi.org/p/shibuya
 
     name: release to pypi
     needs: build
@@ -57,9 +59,6 @@ jobs:
 
     - name: Push build artifacts to PyPI
       uses: pypa/gh-action-pypi-publish@release/v1
-      with:
-        skip-existing: true
-        password: ${{ secrets.PYPI_API_TOKEN }}
 
   release:
     name: write release note