From 8a4c907b1f906af40e059701a990bd857488085c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sebasti=C3=A1n=20Ram=C3=ADrez?= <tiangolo@gmail.com>
Date: Fri, 29 Mar 2024 20:25:14 -0500
Subject: [PATCH] =?UTF-8?q?=F0=9F=91=B7=20Update=20publish=20GitHub=20Acti?=
 =?UTF-8?q?on=20to=20use=20OIDC=20trusted=20publishing?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/publish.yml | 10 ++++------
 1 file changed, 4 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 8278feb9e6..0f197b0c1c 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -18,6 +18,8 @@ jobs:
           - ./
           - typer_package
           - typer_cli_package
+    permissions:
+      id-token: write
     steps:
       - name: Dump GitHub context
         env:
@@ -36,12 +38,8 @@ jobs:
       - name: Build distribution
         working-directory: ${{ matrix.package_dir }}
         run: python -m build
-      - name: Publish
+      - name: Publish typer
+        if: ${{ matrix.package_dir == './'}}
         uses: pypa/gh-action-pypi-publish@v1.8.11
         with:
-          password: ${{ secrets.PYPI_API_TOKEN }}
           packages-dir: ${{ matrix.package_dir }}/dist/
-      - name: Dump GitHub context
-        env:
-          GITHUB_CONTEXT: ${{ toJson(github) }}
-        run: echo "$GITHUB_CONTEXT"