noisepy/NoisePy

Update PyPI publishing to use Trusted Publisher

Closed this issue · 0 comments

Overview

The current publishing to PyPI uses a long-lived token as shown below. As of April, 2023, PyPi now has Trusted Publishing that automatically create a short-lived token, making it a more secure publishing: https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/. It would be good to update this to use the trusted publishing.

- name: Publish to PyPI
uses: pypa/gh-action-pypi-publish@v1.8.5
with:
password: ${{ secrets.PYPI_API_TOKEN }}