From a944989024519254161224a869d3de4c0ab5ba71 Mon Sep 17 00:00:00 2001
From: Philippe Pepiot <phil@philpep.org>
Date: Sat, 29 Mar 2025 17:52:54 +0100
Subject: [PATCH] Atempt to fix gh workflow to publish to pypi

---
 .github/workflows/release.yml | 14 +++++---------
 1 file changed, 5 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 43480215..b9547693 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -8,17 +8,17 @@ on:
 jobs:
   pypi:
     name: Publish to PyPI registry
-    environment: release
+    environment:
+      name: pypi
+      url: https://pypi.org/p/pytest-testinfra
     runs-on: ubuntu-22.04
-
+    permissions:
+      id-token: write
     env:
       FORCE_COLOR: 1
       PY_COLORS: 1
-
     steps:
     - uses: actions/checkout@v4
-      with:
-        fetch-depth: 0 # needed by setuptools-scm
     - name: Switch to using Python 3.11 by default
       uses: actions/setup-python@v5
       with:
@@ -31,8 +31,4 @@ jobs:
       run: |
         tox -e packaging
     - name: Publish to pypi.org
-      if: >- # "create" workflows run separately from "push" & "pull_request"
-        github.event_name == 'release'
       uses: pypa/gh-action-pypi-publish@release/v1
-      with:
-        password: ${{ secrets.pypi_password }}