👷 Update publish GitHub Action to use OIDC trusted publishing

tiangolo · Mar 30, 2024 · 8a4c907 · 8a4c907
1 parent 89ecae0
commit 8a4c907
Showing 1 changed file with 4 additions and 6 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -18,6 +18,8 @@ jobs:
           - ./
           - typer_package
           - typer_cli_package
+    permissions:
+      id-token: write
     steps:
       - name: Dump GitHub context
         env:
@@ -36,12 +38,8 @@ jobs:
       - name: Build distribution
         working-directory: ${{ matrix.package_dir }}
         run: python -m build
-      - name: Publish
+      - name: Publish typer
+        if: ${{ matrix.package_dir == './'}}
         uses: pypa/gh-action-pypi-publish@v1.8.11
         with:
-          password: ${{ secrets.PYPI_API_TOKEN }}
           packages-dir: ${{ matrix.package_dir }}/dist/
-      - name: Dump GitHub context
-        env:
-          GITHUB_CONTEXT: ${{ toJson(github) }}
-        run: echo "$GITHUB_CONTEXT"