Merge pull request #1030 from webknjaz/maintenance/gha-pypi-tokenless…

…-publishing
aio-libs · Jul 13, 2024 · 2f976d0 · 2f976d0
2 parents 4f58a5e + bf1cec8
commit 2f976d0
Showing 1 changed file with 8 additions and 3 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -311,6 +311,14 @@ jobs:
       - test-wheels-arm64-mac
       - test-wheels-windows
 
+    permissions:
+      id-token: write  # IMPORTANT: mandatory for trusted publishing
+
+    environment:
+      name: pypi
+      url: >-
+        https://pypi.org/project/aiokafka/${{ github.ref_name }}
+
     steps:
       - uses: actions/checkout@v2
       - name: Download distributions
@@ -320,6 +328,3 @@ jobs:
           path: dist/
       - name: Publish to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          user: ${{ secrets.PYPI_USERNAME }}
-          password: ${{ secrets.PYPI_PASSWORD }}