From 86e6c49da5798c57b6a70458177fdd26d95023e8 Mon Sep 17 00:00:00 2001
From: Felipe Lima <felipe@ferreiradelima.com>
Date: Mon, 4 Aug 2025 10:31:08 -0400
Subject: [PATCH] Added Trusted Publishing

---
 .github/workflows/publish.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 4816f21..b99f81b 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -36,6 +36,8 @@ jobs:
         name: "Deploy package to PyPI"
         runs-on: ubuntu-latest
         needs: [build]
+        permissions:
+            id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
 
         steps:
             - uses: actions/checkout@v4
@@ -55,9 +57,7 @@ jobs:
               run: uv build
 
             - name: Publish to PyPI
-              env:
-                  PYPI_TOKEN: ${{ secrets.PYPI_TOKEN }}
-              run: uv publish --token $PYPI_TOKEN
+              uses: pypa/gh-action-pypi-publish@release/v1
 
     docs:
         name: "Deploy Docs"