feat: use Trusted Publisher Management instead of API Token

2026-05-15 22:46:47 +08:00
parent 09df62a6c8
commit 5839537f56
1 changed files with 6 additions and 4 deletions
@@ -1,4 +1,4 @@
-name: CI
+name: Publish to PyPI

 on:
  push:
@@ -18,6 +18,11 @@ jobs:
  publish-pypi:
    name: Publish to PyPI
    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/pdfuck
+    permissions:
+      id-token: write
    steps:
      - uses: actions/checkout@v4
        with:
@@ -26,6 +31,3 @@ jobs:
      - run: uv build
      - name: Publish a Python distribution to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          user: __token__
-          password: ${{ secrets.PYPI_API_TOKEN }}