Merge pull request #3 from coherent-oss/feat/configure-release-workflow

feat: Configures trusted publishing release

.github/workflows/main.yml

@@ -101,8 +101,10 @@ jobs:
         jobs: ${{ toJSON(needs) }}
 
   release:
+    environment: release
     permissions:
       contents: write
+      id-token: write
     needs:
     - check
     if: github.event_name == 'push' && contains(github.ref, 'refs/tags/')
@@ -116,8 +118,11 @@ jobs:
           python-version: 3.x
       - name: Install tox
         run: python -m pip install tox
-      - name: Run
-        run: tox -e release
+      - name: Build
+        run: tox -e release exec -- python -m build
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+      - name: GitHub Release
         env:
-          TWINE_PASSWORD: ${{ secrets.PYPI_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: tox -e release exec -- python -m jaraco.develop.create-github-release