Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

Commit fa65cc8

Browse filesBrowse files
authored
fix: use trusted publishing for uploading wheels (#1541)
1 parent c9ef9ee commit fa65cc8
Copy full SHA for fa65cc8

File tree

1 file changed

+5
-5
lines changed
Filter options

1 file changed

+5
-5
lines changed

‎.github/workflows/ci.yml

Copy file name to clipboardExpand all lines: .github/workflows/ci.yml
+5-5Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -284,19 +284,19 @@ jobs:
284284
needs: [build_wheels]
285285
runs-on: ubuntu-latest
286286
environment: release
287+
permissions:
288+
id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
287289

288290
steps:
289291
- uses: actions/download-artifact@v4
290292
with:
291293
# unpacks default artifact into dist/
292294
# if `name: artifact` is omitted, the action will create extra parent dir
293-
pattern: wheels-*
294295
path: dist
296+
pattern: wheels-*
295297
merge-multiple: true
296298

297-
- uses: pypa/gh-action-pypi-publish@v1.12.4
298-
with:
299-
user: __token__
300-
password: ${{ secrets.PYPI_TOKEN }}
299+
- uses:
300+
pypa/gh-action-pypi-publish@v1.12.4
301301

302302
# To test: repository_url: https://test.pypi.org/legacy/

0 commit comments

Comments
0 (0)
Morty Proxy This is a proxified and sanitized view of the page, visit original site.