diff --git a/.github/workflows/publish_pypi.yml b/.github/workflows/publish_pypi.yml
index 72715f9..a8329fc 100644
--- a/.github/workflows/publish_pypi.yml
+++ b/.github/workflows/publish_pypi.yml
@@ -9,6 +9,11 @@ jobs:
 
    push:
      runs-on: ubuntu-latest
+     environment:
+       name: pypi
+       url: https://pypi.org/project/h5p-xblock
+     permissions:
+       id-token: write
      strategy:
        matrix:
          python-version: ['3.8', '3.12']
@@ -29,6 +34,3 @@ jobs:
 
        - name: Publish to PyPi
          uses: pypa/gh-action-pypi-publish@release/v1
-         with:
-           user: __token__
-           password: ${{ secrets.PYPI_UPLOAD_TOKEN }}