use PyPI trusted publishing (OIDC) instead of API token for wppm prod… · winpython/winpython@902ea37 · GitHub

winpython / winpython Public

• Notifications You must be signed in to change notification settings
• Fork 350
• Star 2.3k

• Code
• Issues 78
• Pull requests
• Discussions
• Actions
• Projects
• Wiki
• Security and quality
• Insights

Additional navigation options

Commit 902ea37

Browse filesBrowse the repository at this point in the historyBrowse files

stonebig

committed

use PyPI trusted publishing (OIDC) instead of API token for wppm prod publish

1 parent 8c73084 commit 902ea37
Copy full SHA for 902ea37

1 file changed

+1-1Lines changed: 1 addition & 1 deletion

File tree

Expand file treeCollapse file tree

Open diff view settings

Filter options

• .github/workflows
  • build_wppm_prod_publish.yml

Expand file treeCollapse file tree

Open diff view settings

Collapse file

‎.github/workflows/build_wppm_prod_publish.yml‎

Copy file name to clipboardExpand all lines: .github/workflows/build_wppm_prod_publish.yml

+1-1Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
@@ -76,6 +76,7 @@ jobs:
76	76	name: Upload to PyPI (prod)
77	77	needs: [build_wheels]
78	78	runs-on: ubuntu-24.04
	79	+ environment: pypi # must match the environment declared in the PyPI trusted publisher
79	80	permissions:
80	81	# This permission is required for pypi's "trusted publisher" feature
81	82	id-token: write
@@ -88,6 +89,5 @@ jobs:
88	89
89	90	- uses: pypa/gh-action-pypi-publish@release/v1
90	91	with:
91		- password: ${{ secrets.PYPI_API_TOKEN }}
92	92	skip-existing: true
93	93	verbose: true # Enable verbose output

0 commit comments

Comments

0 (0)