Switch to PyPI trusted publishing (#198)

pyodide · Feb 5, 2025 · cd5265b · cd5265b
1 parent 3765815
commit cd5265b
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -42,10 +42,13 @@ jobs:
     runs-on: ubuntu-latest
     needs: [build]
     if: github.event_name == 'release' && github.event.action == 'published'
-    environment: PyPi-deploy
     permissions:
       id-token: write
       attestations: write
+      contents: read
+    environment:
+      name: pypi
+      url: https://pypi.org/p/micropip
     steps:
       - name: Download all the dists
         uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
@@ -60,6 +63,3 @@ jobs:
 
       - name: Publish distribution 📦 to PyPI
         uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
-        with:
-          user: __token__
-          password: ${{ secrets.PYPI_API_TOKEN }}