diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 5cf3e71..8cc97b0 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -41,12 +41,29 @@ jobs:
     - name: Build packages
       if: "matrix.python-version == '3.8'"
       run: |
-        pip install -U twine wheel
-        python setup.py sdist bdist_wheel
+        pip install -U twine wheel build
+        pyproject-build .
         twine check dist/*
-    - name: Upload packages
+    - name: Save packages as GitHub Actions artifacts
       if: "matrix.python-version == '3.8'"
       uses: actions/upload-artifact@v3
       with:
         name: flowlogs-reader-packages
-        path: dist/*
+        path: dist/
+
+  publish:
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
+    runs-on: ubuntu-latest
+    needs:
+      - build
+    permissions:
+      # https://docs.pypi.org/trusted-publishers/using-a-publisher/
+      id-token: write
+    steps:
+    - uses: actions/checkout@v3
+    - uses: actions/download-artifact@v3
+      with:
+        name: flowlogs-reader-packages
+        path: dist/
+    - name: Upload packages to PyPi
+      uses: pypa/gh-action-pypi-publish@release/v1