use trusted publishing

diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index f6ba8abfacdf9d02f5abb044ef7b70c3d620f402..5bf6bed04e554b19edd30217640bba09b2e7df3d 100644 (file)
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -63,10 +63,8 @@ jobs:
       # Try uploading to Test PyPI first, in case something fails.
       - uses: pypa/gh-action-pypi-publish@b7f401de30cb6434a1e19f805ff006643653240e
         with:
-          password: ${{ secrets.TEST_PYPI_TOKEN }}
           repository_url: https://test.pypi.org/legacy/
           packages_dir: artifact/
       - uses: pypa/gh-action-pypi-publish@b7f401de30cb6434a1e19f805ff006643653240e
         with:
-          password: ${{ secrets.PYPI_TOKEN }}
           packages_dir: artifact/