From 245b808defb75a42dd27d023d1112b9252695e60 Mon Sep 17 00:00:00 2001 From: Yasser Tahiri Date: Thu, 26 Dec 2024 16:57:01 +0100 Subject: [PATCH] =?UTF-8?q?=E2=9C=A8=20Add=20permissions=20for=20ID=20toke?= =?UTF-8?q?n=20in=20pre-release=20workflow=20(#237)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/pre-release.yml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/.github/workflows/pre-release.yml b/.github/workflows/pre-release.yml index 80980b58..f0c4b10f 100644 --- a/.github/workflows/pre-release.yml +++ b/.github/workflows/pre-release.yml @@ -14,6 +14,11 @@ jobs: test_pypi_publish: name: Upload package to Test PyPI runs-on: ubuntu-latest + + # Use Permissions to access the repository + permissions: + id-token: write + steps: - uses: actions/checkout@v4 @@ -27,7 +32,5 @@ jobs: uses: pypa/gh-action-pypi-publish@release/v1 with: packages-dir: pragma-sdk/dist - attestations: false repository-url: https://test.pypi.org/legacy/ - password: ${{ secrets.PYPI_API_TOKEN }} skip-existing: true