Skip to content

Commit 902ea37

Browse files
committed
use PyPI trusted publishing (OIDC) instead of API token for wppm prod publish
1 parent 8c73084 commit 902ea37

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

.github/workflows/build_wppm_prod_publish.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -76,6 +76,7 @@ jobs:
7676
name: Upload to PyPI (prod)
7777
needs: [build_wheels]
7878
runs-on: ubuntu-24.04
79+
environment: pypi # must match the environment declared in the PyPI trusted publisher
7980
permissions:
8081
# This permission is required for pypi's "trusted publisher" feature
8182
id-token: write
@@ -88,6 +89,5 @@ jobs:
8889

8990
- uses: pypa/gh-action-pypi-publish@release/v1
9091
with:
91-
password: ${{ secrets.PYPI_API_TOKEN }}
9292
skip-existing: true
9393
verbose: true # Enable verbose output

0 commit comments

Comments
 (0)