Migrate to trusted platform publishing

Author: glow-mdsol

.github/workflows/publish.yml

@@ -5,37 +5,13 @@ on:
       - created
 
 jobs:
-  test-publish:
-    name: Test Publish
-    runs-on:
-      ubuntu-latest
-    strategy:
-      fail-fast: false
-      matrix:
-        python-version: [ "3.10" ]
-        poetry-version: [ "1.4.2" ]
-        os: [ ubuntu-latest ]
-    steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-python@v4
-        with:
-          python-version: ${{ matrix.python-version }}
-      - name: Run image
-        uses: abatilo/actions-poetry@v2
-        with:
-          poetry-version: ${{ matrix.poetry-version }}
-      - name: Build Project
-        run: poetry build
-      - name: Upload release to PyPI Test
-        uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          password: ${{ secrets.TEST_PYPI_API_TOKEN }}
-          repository-url: https://test.pypi.org/legacy/
   publish:
-    needs: test-publish
     name: Publish to PyPI
     runs-on:
       ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write
     strategy:
       fail-fast: false
       matrix:
@@ -55,5 +31,3 @@ jobs:
         run: poetry build
       - name: Upload release to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          password: ${{ secrets.PYPI_API_TOKEN }}