Merge pull request #357 from mtreinish/trusted-publishers

Pivot PyPI publishing to use trusted publishers

.github/workflows/release.yml

@@ -7,14 +7,17 @@ jobs:
  wheel-build:
  name: Build and Publish Release Artifacts
  runs-on: ubuntu-latest
+ environment: release
+ permissions:
+ id-token: write
  steps:
- - uses: actions/checkout@v2
- - uses: actions/setup-python@v2
+ - uses: actions/checkout@v3
+ - uses: actions/setup-python@v4
  name: Install Python
  with:
  python-version: '3.8'
  - name: Install Deps
- run: pip install -U twine wheel
+ run: pip install -U wheel
  - name: Build Artifacts
  run: |
  python setup.py sdist bdist_wheel
@@ -23,7 +26,4 @@ jobs:
  with:
  path: ./dist/stestr*
  - name: Publish to PyPi
- env:
- TWINE_PASSWORD: ${{ secrets.TWINE_PASSWORD }}
- TWINE_USERNAME: stestr-release
- run: twine upload dist/stestr*
+ uses: pypa/gh-action-pypi-publish@release/v1