chore(python-sdk): enable PyPI trusted publishing (#297)

openfga · Jan 29, 2024 · 747fc56 · 747fc56
2 parents 66c37bb + 8b7e252
commit 747fc56
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/config/clients/python/template/.github/workflows/main.yaml b/config/clients/python/template/.github/workflows/main.yaml
@@ -42,6 +42,10 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/v')
     needs: [test]
 
+    permissions:
+      # Required for PyPI trusted publishing
+      id-token: write
+
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
@@ -67,9 +71,6 @@ jobs:
 
       - name: Publish package
         uses: pypa/gh-action-pypi-publish@2f6f737ca5f74c637829c0f5c3acd0e29ea5e8bf
-        with:
-          user: __token__
-          password: ${{ secrets.PYPI_API_TOKEN }}
 
   create-release:
     runs-on: ubuntu-latest