diff --git a/config/clients/python/template/.github/workflows/main.yaml b/config/clients/python/template/.github/workflows/main.yaml
index 5badd929..94391fd8 100644
--- a/config/clients/python/template/.github/workflows/main.yaml
+++ b/config/clients/python/template/.github/workflows/main.yaml
@@ -42,6 +42,10 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/v')
     needs: [test]
 
+    permissions:
+      # Required for PyPI trusted publishing
+      id-token: write
+
     steps:
       - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
         with:
@@ -67,9 +71,6 @@ jobs:
 
       - name: Publish package
         uses: pypa/gh-action-pypi-publish@2f6f737ca5f74c637829c0f5c3acd0e29ea5e8bf
-        with:
-          user: __token__
-          password: ${{ secrets.PYPI_API_TOKEN }}
 
   create-release:
     runs-on: ubuntu-latest