diff --git a/.github/workflows/python-publish.yml b/.github/workflows/python-publish.yml
index e087847..7ccae2b 100644
--- a/.github/workflows/python-publish.yml
+++ b/.github/workflows/python-publish.yml
@@ -7,6 +7,9 @@ on:
 jobs:
   deploy:
     runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write
 
     steps:
       - uses: actions/checkout@v4
@@ -19,9 +22,7 @@ jobs:
         with:
           python-version: "3.x"
       - name: Build and publish
-        env:
-          UV_PUBLISH_USERNAME: ${{ secrets.PYPI_USERNAME }}
-          UV_PUBLISH_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
         run: |
           uv build
-          uv publish
+      - name: Upload to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1