Skip to content

Commit

Permalink
Forces a PyPI audience when token minting
Browse files Browse the repository at this point in the history
  • Loading branch information
ChristopherHammond13 committed Aug 15, 2023
1 parent 0ed891d commit 7af48ee
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions .github/workflows/release-deploy.yml
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ jobs:
python -m pip install --upgrade pip
python -m pip install poetry
- name: Mint a token for PyPI
id: token_mint
id: mint-pypi-token
shell: bash
# This code was taken from tschm/token-mint-action
run: |
Expand Down Expand Up @@ -53,7 +53,7 @@ jobs:
echo "Fetching OIDC token"
resp=$(curl -sS -H "Authorization: bearer ${ACTIONS_ID_TOKEN_REQUEST_TOKEN}" \
"${ACTIONS_ID_TOKEN_REQUEST_URL}&audience=${{ inputs.audience }}")
"${ACTIONS_ID_TOKEN_REQUEST_URL}&audience=pypi")
# extract the token from the response
oidc_token=$(jq -r '.value' <<< "${resp}")
Expand All @@ -79,4 +79,4 @@ jobs:
- name: Build and publish
run: |
poetry publish --build -u __token__ -p '${{ steps.token_mint.outputs.api-token }}'
poetry publish --build -u __token__ -p '${{ steps.mint-pypi-token.outputs.api-token }}'

0 comments on commit 7af48ee

Please sign in to comment.