Add `id-token: write` permission to PyPI and TestPyPI workflows #47

	name: Publish Python 🐍 distributions 📦 to TestPyPI

	permissions:
	id-token: write # This is required for requesting the JWT

	on:
	push:
	tags:
	- '*'
	jobs:
	build-n-publish:
	name: Build and publish Python 🐍 distributions 📦 to TestPyPI
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@master
	- name: Get the version
	id: get_version
	run: echo ::set-output name=VERSION::${GITHUB_REF/refs\/tags\//}
	- name: Replace version
	run: \|
	echo Changing version in setup.py to ${{ steps.get_version.outputs.VERSION }}
	sed -i 's/VERSION = ".*"/VERSION = "${{ steps.get_version.outputs.VERSION }}"/g' setup.py
	- name: Set up Python 3.9
	uses: actions/setup-python@v1
	with:
	python-version: 3.9
	- name: Install pypa/build
	run: >-
	python -m
	pip install
	build
	--user
	- name: Build a binary wheel and a source tarball
	run: >-
	python -m
	build
	--sdist
	--wheel
	--outdir dist/
	- name: Publish distribution 📦 to Test PyPI
	uses: pypa/gh-action-pypi-publish@release/v1
	with:
	password: ${{ secrets.TEST_PYPI_API_TOKEN }}
	repository-url: https://test.pypi.org/legacy/

Provide feedback