Update release.py to use trusted publisher status for publishing inst…

…ead of user/password
materialsproject · Mar 20, 2024 · d256508 · d256508
1 parent a00cc06
commit d256508
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/.github/workflows/release.py b/.github/workflows/release.py
@@ -7,6 +7,9 @@
 jobs:
   deploy:
     runs-on: ubuntu-latest
+    permissions:
+      # For pypi trusted publishing
+      id-token: write
     strategy:
       max-parallel: 1
       matrix:
@@ -30,6 +33,8 @@
       - name: Publish package
         uses: pypa/gh-action-pypi-publish@master
         with:
-          user: __token__
-          password: ${{ secrets.PYPI_API_TOKEN }}
+          # user: __token__
+          # password: ${{ secrets.PYPI_API_TOKEN }}
+          skip-existing: true
+          verbose: true
           packages_dir: dist/