Use an environmental variable for PyPI token (#5)

The token is not leaked, since GitHub Actions redacts secrets from logs automatically. But it's safer to not rely on that.
etianen · Jan 15, 2024 · b40b4ba · b40b4ba
1 parent 6aba6cf
commit b40b4ba
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
@@ -21,5 +21,6 @@ jobs:
     # Build.
     - run: poetry build
     # Release.
-    - run: poetry config pypi-token.pypi "${{ secrets.PYPI_TOKEN }}"
     - run: poetry publish
+      env:
+        POETRY_PYPI_TOKEN_PYPI: ${{ secrets.PYPI_TOKEN }}