Rework publish workflow for trusted publisher (#131)

Author: strickvl

.github/workflows/publish-pypi-package.yml

@@ -1,39 +1,43 @@
-name: Publish PyPi package
-
+---
+name: Publish Pypi package
 on:
   workflow_call:
-
 jobs:
   publish_to_pypi:
     name: Publish Python 🐍 package 📦 to PyPI
     runs-on: ubuntu-latest
+    permissions:
+      # This permission is required for trusted publishing.
+      id-token: write
+      contents: read
     env:
-      PYTHONIOENCODING: "utf-8"
-
+      ZENML_DEBUG: 1
+      ZENML_ANALYTICS_OPT_IN: false
+      PYTHONIOENCODING: utf-8
     steps:
-      - uses: actions/checkout@v3
-
+      - uses: actions/[email protected]
       - name: Get the version from the github tag ref
         id: get_version
         run: echo ::set-output name=VERSION::${GITHUB_REF/refs\/tags\//}
-
       - name: Set up Python
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@v5.0.0
         with:
           python-version: "3.8"
-
       - name: Install Poetry
-        uses: snok/install-poetry@v1
+        uses: snok/install-poetry@v1.3.4
         with:
           virtualenvs-create: true
           virtualenvs-in-project: true
-
-      - name: publish
-        env:
-          PYPI_USERNAME: ${{ secrets.PYPI_USERNAME }}
-          PYPI_TOKEN: ${{ secrets.PYPI_TOKEN }}
-        run: |
-          if [ "$(cat src/mlstacks/VERSION)" = "$(echo ${GITHUB_REF} | sed 's|refs/tags/||g')" ];
-          then ./scripts/publish.sh;
+      - name: Include latest dashboard
+        run: bash scripts/install-dashboard.sh
+      - name: Build package
+        run: poetry build
+      - name: Mint token
+        id: mint
+        uses: tschm/[email protected]
+      - name: Publish the package with poetry
+        run: |-
+          if [ "$(cat src/zenml/VERSION)" = "$(echo ${GITHUB_REF} | sed 's|refs/tags/||g')" ];
+          then poetry publish -u __token__ -p '${{ steps.mint.outputs.api-token }}';
           else echo "Version mismatch between src/zenml/VERSION and branch tag" && exit 1;
           fi