From 6314301e3ff88d4cd2254407bf412a1cf28ef20d Mon Sep 17 00:00:00 2001
From: famura <fabio.muratore@famura.net>
Date: Sat, 11 Nov 2023 16:14:52 +0100
Subject: [PATCH] Fixed publish workflow

---
 .github/workflows/publish.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index c4fb00e..5e66b8a 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -37,6 +37,7 @@ jobs:
       name: pypi
       url: https://pypi.org/p/blm
     permissions:
+      contents: read
       id-token: write  # mandatory for trusted publishing
     steps:
       - name: Download all distributions
@@ -46,3 +47,5 @@ jobs:
           path: dist/
       - name: Publish distributions to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          password: ${{ secrets.PYPI_API_TOKEN }}  # allegedly deprecated