publish: fix permissions #2

	name: Python package

	on:
	push:
	tags:
	- "v*"
	jobs:
	build:
	runs-on: ubuntu-latest
	# https://docs.pypi.org/trusted-publishers/using-a-publisher/
	environment: release
	permissions:
	id-token: write
	contents: read
	steps:
	- name: Checkout
	uses: actions/checkout@v3

	- name: Install Poetry
	run: \|
	pipx install poetry

	- name: Set up Python
	uses: actions/setup-python@v4
	with:
	python-version: '3.9'
	cache: 'poetry'

	- name: Install dependencies
	run: \|
	poetry install

	- name: Build
	run: \|
	poetry build

	- name: Publish to pypi
	uses: pypa/gh-action-pypi-publish@release/v1

Provide feedback