Using trusted publishing and poetry

[tschm]

Hoi zame,

Trusted publishing is a rather new (Apr 20) way to publish code on pypi.org. It relies on a key exchange between your package and pypi.org. This is somewhat subtle and we have implemented a Github action to simplify this problem. It works great for poetry and no longer you need to create keys on pypi and move them over as Github secrets.

A full example and a complete discussion are here:
https://github.com/marketplace/actions/pypi-token-mint

[edgarrmondragon]

The official PyPA action works fine as well.