From c8ba3dff539ddce816f3c236f9ab8f2a2076d6fd Mon Sep 17 00:00:00 2001
From: Kiyoon Kim <kiyoon@users.noreply.github.com>
Date: Thu, 12 Dec 2024 18:07:08 +0900
Subject: [PATCH] ci: pypi trusted publisher

---
 .github/workflows/deploy.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 236bae7..b2862fa 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -170,12 +170,12 @@ jobs:
     if: ${{ github.event.inputs.dry-run == 'false' }}
     runs-on: ubuntu-24.04
     needs: [linux, windows, macos, sdist, commit-changelog-and-release]
+    permissions:
+      id-token: write
     steps:
       - uses: actions/download-artifact@v4
       - name: Publish to PyPI
         uses: PyO3/maturin-action@v1
-        env:
-          MATURIN_PYPI_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
         with:
           command: upload
           args: --non-interactive --skip-existing wheels-*/*