bp/resqpy

Implement Trusted Publishing to PyPI

Closed this issue · 1 comments

We could implement the new recommended way of publishing to PyPI, which is a bit more secure than the previous API Token method and removes the need to manage secrets as GitHub environment variables.

https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/

FYI @emmanesbit @cflynn3 , as we three are the PyPI maintainers currently. I could take a stab at this tomorrow.