👷 Use tschm/token-mint-action for trusted publishing.

python-lapidary · Jun 29, 2024 · 384eaf1 · 384eaf1
1 parent 2a325b7
commit 384eaf1
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/.github/workflows/pypi.yaml b/.github/workflows/pypi.yaml
@@ -20,7 +20,8 @@ jobs:
  with:
  python-version: 3.12
  poetry-version: 1.8.3
- - name: Publish to PyPI using OIDC
- run: |
- poetry config pypi-token.pypi ${{ secrets.PYPI_PUBLISH_TOKEN }}
- poetry publish --build
+ - name: Mint token
+ id: mint
+ uses: tschm/token-mint-action@v1.0.3
+ - name: Publish the package
+ run: poetry publish --build -u __token__ -p '${{ steps.mint.outputs.api-token }}'