From 9c6580d2b67299f9a43fd1f1de786927867c5a48 Mon Sep 17 00:00:00 2001
From: Abhinaysai Kamineni <66816045+askmy-stack@users.noreply.github.com>
Date: Wed, 12 Aug 2026 16:32:42 -0400
Subject: [PATCH] align PyPI workflow identity

---
 .github/workflows/publish.yml | 1 -
 docs/publishing.md            | 7 +++++--
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index a4d08a5..8bdf732 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -12,7 +12,6 @@ permissions:
 jobs:
   publish:
     runs-on: ubuntu-latest
-    environment: pypi
     steps:
       - uses: actions/checkout@v7
       - uses: actions/setup-python@v7
diff --git a/docs/publishing.md b/docs/publishing.md
index f3752a0..9afd191 100644
--- a/docs/publishing.md
+++ b/docs/publishing.md
@@ -11,8 +11,11 @@ No long-lived PyPI API token is stored in the repository.
    - Owner: `askmy-stack`
    - Repository: `tool-semantics`
    - Workflow: `publish.yml`
-   - Environment: `pypi`
-3. In GitHub, create an Environment named `pypi` (optional protection rules).
+   - Environment: leave blank
+
+The workflow intentionally has no GitHub Environment. If an environment is added
+later, add the same environment name to PyPI's trusted-publisher configuration
+first; otherwise PyPI will reject the environment-scoped OIDC identity.
 
 ## Release steps