Fixed trusted publishing (2)

Signed-off-by: Andreas Maier <[email protected]>
zhmcclient · Oct 9, 2024 · dd817a2 · dd817a2
1 parent 10057e1
commit dd817a2
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -16,6 +16,8 @@ jobs:
     name: Build and publish to PyPI
     if: startsWith(github.ref, 'refs/tags')
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
 
     #-------- Info gathering and checks
@@ -168,8 +170,6 @@ jobs:
         ls -l dist
     - name: Publish distribution to PyPI
       if: startsWith(github.ref, 'refs/tags')
-      permissions:
-        id-token: write
       uses: pypa/gh-action-pypi-publish@release/v1
       with:
         packages-dir: dist