Update PyPI publishing to use Trusted Publisher
Closed this issue · 0 comments
lsetiawan commented
Overview
The current publishing to PyPI uses a long-lived token as shown below. As of April, 2023, PyPi now has Trusted Publishing that automatically create a short-lived token, making it a more secure publishing: https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/. It would be good to update this to use the trusted publishing.
NoisePy/.github/workflows/release.yaml
Lines 101 to 104 in 88dc14e