Merge pull request #6 from mondaycom/gh-publish

Gh publish

Author: rzmnd

.github/workflows/pypa-publish.yml

@@ -10,7 +10,18 @@ jobs:
       permissions:
         id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
       steps:
+        - uses: actions/create-github-app-token@v1
+          id: app-token
+          with:
+            # required
+            app-id: ${{ vars.APP_ID }}
+            private-key: ${{ secrets.PRIVATE_KEY }}
         - uses: actions/checkout@v4
+          with:
+            token: ${{ steps.app-token.outputs.token }}
+            ref: ${{ github.head_ref }}
+            # Make sure the value of GITHUB_TOKEN will not be persisted in repo's config
+            persist-credentials: false
         - name: Set up Python
           uses: actions/setup-python@v4
           with: