ci: Use PyPI environment for publish job

Using environments allows to configure additional protections for this secret, e. g. manual approval of the publish workflow.
Nitrokey · Jul 30, 2024 · ef5444b · ef5444b
1 parent daf92b9
commit ef5444b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/.github/workflows/cd-pypi.yaml b/.github/workflows/cd-pypi.yaml
@@ -58,6 +58,7 @@ jobs:
     runs-on: ubuntu-latest
     container: python:3.9-slim
     needs: build
+    environment: PyPI
     env:
       POETRY_PYPI_TOKEN_PYPI: ${{ secrets.PYPI_TOKEN }}
       POETRY_PYPI_URL: https://upload.pypi.org/legacy/