Merge pull request #50 from tago-io/added_trusted_publisher

Added Trusted Publishing

Author: felipefdl

.github/workflows/publish.yml

@@ -36,6 +36,8 @@ jobs:
         name: "Deploy package to PyPI"
         runs-on: ubuntu-latest
         needs: [build]
+        permissions:
+            id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
 
         steps:
             - uses: actions/checkout@v4
@@ -55,9 +57,7 @@ jobs:
               run: uv build
 
             - name: Publish to PyPI
-              env:
-                  PYPI_TOKEN: ${{ secrets.PYPI_TOKEN }}
-              run: uv publish --token $PYPI_TOKEN
+              uses: pypa/gh-action-pypi-publish@release/v1
 
     docs:
         name: "Deploy Docs"