From 0b634b3233634e4c252ee307a968990c130e4b59 Mon Sep 17 00:00:00 2001
From: Leonardo Rosenbach <rosenbach.esss.com>
Date: Fri, 29 Nov 2024 13:34:22 -0300
Subject: [PATCH] Publish package using trusted publisher management

PWPA-1903
---
 .github/workflows/deploy.yml | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 1d6b5ce..3723aba 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -12,13 +12,16 @@ jobs:
     if: startsWith(github.event.ref, 'refs/tags')
 
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
 
     steps:
       - uses: actions/checkout@v4
       - name: Set up Python
         uses: actions/setup-python@v5
         with:
-          python-version: "3.10"
+          python-version: "3.12"
       - name: Install build
         run: |
           python -m pip install --upgrade pip
@@ -26,11 +29,7 @@ jobs:
       - name: Build package
         run: |
           python -m build
-      - name: Publish package to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          user: __token__
-          password: ${{ secrets.pypi_token }}
+
       - name: GitHub Release
         uses: softprops/action-gh-release@v2
         with: