commit - 4f17468f29ee36b9791749058468b770326aa032
commit + 281c15a4f4135bc6a5625f6c344181e7a92eb7eb
blob - 5dd4981b8fcf093cd267f9bb2692e8a2c7679815
blob + 4d517953885ca494bc78c567931afb77b7a1b594
--- .github/workflows/python-distributions.yml
+++ .github/workflows/python-distributions.yml
@@ -63,18 +63,16 @@ jobs:
       - build-wheels
       - build-sdist
     if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/dulwich-')
+    permissions:
+      id-token: write
+    environment:
+      name: pypi
+      url: https://pypi.org/p/dulwich
     steps:
-      - name: Install twine
-        run: |
-          python -m pip install --upgrade pip
-          pip install twine
       - name: Download distributions
         uses: actions/download-artifact@v2
         with:
           name: artifact
           path: dist
-      - name: Publish distributions
-        env:
-          TWINE_USERNAME: ${{ secrets.PYPI_USERNAME }}
-          TWINE_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
-        run: twine upload dist/*
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1