From fc7efb69aa8f56e89dec457c53c8dff9ca760251 Mon Sep 17 00:00:00 2001
From: Joerg Herbel <joerg.herbel@checkmk.com>
Date: Tue, 16 Jul 2024 11:53:07 +0200
Subject: [PATCH] Add publishing on PyPI to release workflow

CMK-18197
---
 .github/workflows/release.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index b43059b..14e3d27 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -1,3 +1,6 @@
+# Note: The name of this file and the name of the used environment must match the Trusted Publisher
+# configuration on PyPI.
+
 ---
   name: "Release"
   on:
@@ -16,6 +19,9 @@
 
     release:
       runs-on: ubuntu-latest
+      environment: release
+      permissions:
+        id-token: write
       needs: [tests]
       steps:
         - uses: actions/checkout@v4
@@ -50,3 +56,5 @@
             updateOnlyUnreleased: true
             makeLatest: false
             tag: ${{ inputs.tag }}
+
+        - uses: pypa/gh-action-pypi-publish@release/v1