diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 44b47f7..dbc0b65 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -6,19 +6,23 @@ on: [push]
 
 jobs:
   release:
+    name: Upload release to PyPI
     runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/cmocean
+    permissions:
+      id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing    
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v5
       - name: Install dependencies
         run: |
-          python -m pip install -U pip wheel "setuptools<66.0.0" setuptools-scm twine
+          python -m pip install -U pip wheel
+          # python -m pip install -U pip wheel "setuptools<66.0.0" setuptools-scm twine
       - name: Build distributions
         run: python setup.py sdist bdist_wheel
 
       - name: Publish to PyPI
         if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
         uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          user: ${{ secrets.PYPI_USERNAME }}
-          password: ${{ secrets.PYPI_PASSWORD }}