From f5c3707c8be8fa5918d76d7f16700d9a73b14b15 Mon Sep 17 00:00:00 2001 From: Nathan Drezner <38958867+ndrezn@users.noreply.github.com> Date: Mon, 5 May 2025 13:07:06 -0400 Subject: [PATCH] Use Trusted Publisher rather than API keys --- .github/workflows/publish.yml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 079454e..ae3d8ba 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -30,9 +30,7 @@ jobs: path: dist/ - name: Publish package distributions to PyPI uses: pypa/gh-action-pypi-publish@release/v1 - with: - password: ${{ secrets.PYPI_API_TOKEN }} - + - name: Download npm package uses: actions/download-artifact@v4 with: @@ -50,4 +48,4 @@ jobs: popd env: NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} - shell: bash \ No newline at end of file + shell: bash