search

aiidalab / aiidalab-widgets-base

Reusable widgets for AiiDAlab applications
MIT License
7 stars 17 forks source link

Consider using trusted publishing to PyPI instead of API tokens #567

Open danielhollas opened 7 months ago

danielhollas commented 7 months ago

https://docs.pypi.org/trusted-publishers/

danielhollas commented 7 months ago

Should we relatively easy to setup for somebody with access to the PyPI account

https://pypi.org/manage/account/publishing/

image

danielhollas commented 7 months ago

Once the setup on PyPI is complete, the workflow file should be updated according to

https://github.com/pypa/gh-action-pypi-publish?tab=readme-ov-file#trusted-publishing

Once verified that it works, the secret API tokens should be deleted from the Github Environment.