summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorWilliam Woodruff <william@yossarian.net>2023-05-14 17:57:30 -0400
committerGitHub <noreply@github.com>2023-05-14 16:57:30 -0500
commita1524d3715dbdcc2d6e2084bdab7d2a77fb4f145 (patch)
tree61421d77671dfc43504aab190b405b3a646f8d22
parentaca0f01bb6a29eda24799ec31895f45a1bb9e58b (diff)
downloadurllib3-a1524d3715dbdcc2d6e2084bdab7d2a77fb4f145.tar.gz
Use trusted publishing for PyPI
-rw-r--r--.github/workflows/publish.yml6
1 files changed, 2 insertions, 4 deletions
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 7a28c75c..98edf485 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -65,6 +65,7 @@ jobs:
needs: ["build", "provenance"]
permissions:
contents: write
+ id-token: write # Needed for trusted publishing to PyPI.
runs-on: "ubuntu-latest"
steps:
@@ -81,7 +82,4 @@ jobs:
gh release upload ${{ github.ref_name }} dist/* --repo ${{ github.repository }}
- name: "Publish dists to PyPI"
- uses: "pypa/gh-action-pypi-publish@48b317d84d5f59668bb13be49d1697e36b3ad009"
- with:
- user: __token__
- password: ${{ secrets.PYPI_TOKEN }}
+ uses: "pypa/gh-action-pypi-publish@a56da0b891b3dc519c7ee3284aff1fad93cc8598"