wheel.yml uses Trusted Publisher pattern

facebook · Oct 2, 2024 · 2a57e9d · 2a57e9d
1 parent 6e9fa67
commit 2a57e9d
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/.github/workflows/wheel.yml b/.github/workflows/wheel.yml
@@ -93,6 +93,9 @@ jobs:
     needs: [make-wheels, make-sdist]
     runs-on: ubuntu-latest
     if: github.event_name == 'release' && github.event.action == 'published'
+    environment: release
+    permissions:
+      id-token: write
     steps:
     - name: Download all artifacts
       uses: actions/download-artifact@v4
@@ -106,6 +109,3 @@ jobs:
 
     - name: Upload
       uses: pypa/gh-action-pypi-publish@v1.10.2
-      with:
-        user: ${{ secrets.PYPI_USERNAME }}
-        password: ${{ secrets.PYPI_PASSWORD }}