Convert publishing pipeline to Trusted Publishing

https://github.com/google/osv.dev/blob/408eb3ea00e661bfd3ae894226f5296f101653c5/.github/workflows/publish-to-pypi.yaml#L46-L50

See https://docs.pypi.org/trusted-publishers/

Post-migration, remove the secret from GitHub and PyPI.

	- name: Publish distribution to PyPI
	uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
	with:
	password: ${{ secrets.PYPI_API_TOKEN }}
	packages_dir: dist/

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Convert publishing pipeline to Trusted Publishing #5122

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Convert publishing pipeline to Trusted Publishing #5122

Description

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions