Investigate Pypi Trusted Publisher

[lavigne958]

Overview

We should enable trusted publishers in order to publish packages to TestPypi and Pypi without the need of passwords and username. (Don't know if we need it but it's worth checking-out)

[alifeee]

blog post about why: https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/

how-to guide: https://docs.pypi.org/trusted-publishers/

[lavigne958]

I went through the doc, we can't use it for now, only the owner of the project can do it.

We need @burnash assistance for this. please.

[burnash]

Hi @lavigne958, thanks for pinging me. I've added the new GitHub publisher for this repo to Trusted Publishers with these settings:
Workflow: release.yaml
Environment name: release

[lavigne958]

Hi thank you for the prompt reply !
thanks for the settings, we'll update the release workflow and test it next time we release.

[lavigne958]

@burnash I am wondering, did you create the release environment in the repository ? I don't have access to it, I can't check.

I did not manage to make it work, I believe it could be because the env does not exist.