diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index e4519b8..712a270 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -9,6 +9,8 @@ jobs:
   build-n-publish:
     name: Build and publish to PyPI
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
     - uses: actions/checkout@master
     - name: Set up Python 3.11
@@ -24,5 +26,3 @@ jobs:
     - name: Publish distribution to PyPI
       if: startsWith(github.ref, 'refs/tags')
       uses: pypa/gh-action-pypi-publish@release/v1
-      with:
-        password: ${{ secrets.PYPI_API_TOKEN }}
diff --git a/.gitignore b/.gitignore
index b6e4761..6923d69 100644
--- a/.gitignore
+++ b/.gitignore
@@ -120,6 +120,10 @@ venv.bak/
 # mkdocs documentation
 /site
 
+# OS files
+.DS_Store
+thumbs.db
+
 # mypy
 .mypy_cache/
 .dmypy.json