Update python-publish.yml to use Trusted Publishing

actions / starter-workflows

Accelerating new GitHub Actions workflows

https://github.com/features/actions

Other

8.59k stars 5.08k forks source link

Open woodruffw opened 3 months ago

woodruffw commented 3 months ago

I'm filing this for myself to work on 🙂

Per https://github.com/github/docs/pull/32146 and the earlier https://github.com/github/docs/pull/24772: PyPI now supports authentication via OIDC ("Trusted Publishing") and other official GitHub resources mostly refer to that authentication mechanism.

This workflow should be similarly updated to use Trusted Publishing instead of a manually configured API token.

github-actions[bot] commented 1 week ago

This issue has become stale and will be closed automatically within a period of time. Sorry about that.

woodruffw commented 1 week ago

This is not stale.