Change: Use trusted publisher upload for PyPI

[Trusted publisher](https://docs.pypi.org/trusted-publishers/) improves the security of the deployment.
greenbone · Jan 25, 2024 · 2f7388c · 2f7388c
1 parent 3ba0979
commit 2f7388c
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/.github/workflows/deploy-pypi.yml b/.github/workflows/deploy-pypi.yml
@@ -6,9 +6,12 @@ on:
 
 jobs:
   deploy:
+    permissions:
+      id-token: write
     runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/project/troubadix/
     steps:
       - name: Build and publish to PyPI
         uses: greenbone/actions/pypi-upload@v3
-        with:
-          pypi-token: ${{ secrets.PYPI_TOKEN }}