Using PyPI's trusted publishing

kyutai-labs · Sep 20, 2024 · d828f0b · d828f0b
1 parent 236e824
commit d828f0b
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/rustymimi-ci.yml b/.github/workflows/rustymimi-ci.yml
@@ -154,12 +154,12 @@ jobs:
     runs-on: ubuntu-latest
     if: "startsWith(github.ref, 'refs/tags/')"
     needs: [linux, musllinux, windows, macos, sdist]
+    permissions:
+      id-token: write
     steps:
       - uses: actions/download-artifact@v4
       - name: Publish to PyPI
         uses: PyO3/maturin-action@v1
-        env:
-          MATURIN_PYPI_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
         with:
           command: upload
           args: --non-interactive --skip-existing wheels-*/*