From 36ec75004fec86153ba5086e7c5ab5efcd2f7d5d Mon Sep 17 00:00:00 2001
From: Matt McCormick <matt.mccormick@kitware.com>
Date: Sun, 21 Apr 2024 22:58:57 -0400
Subject: [PATCH] BUG: Fix pypi action publish settings scope

---
 .github/workflows/build-test-publish.yml | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/build-test-publish.yml b/.github/workflows/build-test-publish.yml
index 8deb6a9..4c4b2b9 100644
--- a/.github/workflows/build-test-publish.yml
+++ b/.github/workflows/build-test-publish.yml
@@ -2,12 +2,6 @@ name: "build-test-publish"
 
 on: [push, pull_request]
 
-environment:
-  name: pypi
-  url: https://pypi.org/p/itk-dreg
-permissions:
-  id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
-
 jobs:
   build_wheel:
     name: Build Python wheels
@@ -69,6 +63,12 @@ jobs:
       - pytest
     runs-on: ubuntu-22.04
     if: github.event_name == 'push' && startsWith(github.event.ref, 'refs/tags')
+    environment:
+      name: pypi
+      url: https://pypi.org/p/itk-dreg
+    permissions:
+      id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
+
     steps:
       - name: Download Python Wheel Artifact
         uses: actions/download-artifact@v4