Merge pull request #263 from robinostlund/new-pypi-workflow

updating deployment workflow
robinostlund · May 14, 2024 · 09e555a · 09e555a
2 parents ca8582a + 13ee97a
commit 09e555a
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -9,6 +9,9 @@ jobs:
     if: "!github.event.release.prerelease"
     name: Upload Package to PyPi Repository
     runs-on: ubuntu-latest
+    environment: release
+    permissions:
+      id-token: write
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -34,5 +37,4 @@ jobs:
         if: startsWith(github.ref, 'refs/tags')
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
-          password: ${{ secrets.PYPI_TOKEN_PROD }}
           print_hash: true
diff --git a/.github/workflows/testrelease.yaml b/.github/workflows/testrelease.yaml
@@ -9,6 +9,9 @@ jobs:
   build:
     name: Upload Package to PyPi Test Repository
     runs-on: ubuntu-latest
+    environment: testrelease
+    permissions:
+      id-token: write
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
@@ -33,7 +36,6 @@ jobs:
       - name: Publish package to Test PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
-          password: ${{ secrets.PYPI_TOKEN_TEST }}
           repository_url: https://test.pypi.org/legacy/
           print_hash: true
           skip_existing: true