Update lint-publish.yml

mitre-attack · Mar 14, 2024 · 5176bd4 · 5176bd4
1 parent 642f7a9
commit 5176bd4
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/.github/workflows/lint-publish.yml b/.github/workflows/lint-publish.yml
@@ -32,6 +32,11 @@ jobs:
     needs: lint-test
     if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
     runs-on: ubuntu-latest
+    # required for PyPI Trusted Publisher setup
+    # https://docs.pypi.org/trusted-publishers/using-a-publisher/
+    environment: release
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v4
 
@@ -58,5 +63,3 @@ jobs:
       - name: Publish package
         if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
         uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          password: ${{ secrets.PYPI_API_TOKEN }}