From f042396d5fdd7b7d3abde0b3d9c663d3d62ff2c9 Mon Sep 17 00:00:00 2001
From: Jake Awe <jawe@nvidia.com>
Date: Wed, 26 Jun 2024 12:18:08 -0500
Subject: [PATCH] add mint-token step to cucim workflow

---
 .github/workflows/pr.yaml | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
index 3fd68562f..66b0d31bb 100644
--- a/.github/workflows/pr.yaml
+++ b/.github/workflows/pr.yaml
@@ -67,15 +67,19 @@ jobs:
     with:
       build_type: pull-request
       script: ci/test_wheel.sh
-  wheel-publish:
+  mint-token:
+    runs-on: ubuntu-latest
     permissions:
-      actions: read
-      contents: read
       id-token: write
-      packages: read
-      pull-requests: read
     needs: wheel-build
     secrets: inherit
+    steps:
+      - name: Mint GitHub Token
+        uses: rapidsai/shared-actions/mint-pypi-token@mint-pypi-token
+        id: mint-token
+  wheel-publish:
+    needs: [wheel-build, mint-token]
+    secrets: inherit
     uses: rapidsai/shared-workflows/.github/workflows/wheels-publish.yaml@test_pypi_trusted_publish
     with:
       build_type: pull-request