diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index d9bf1bb..ce6d7de 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -24,8 +24,8 @@ jobs:
           python-version: '3.12'
       - uses: pre-commit/action@v3.0.1
 
-  test_pipenv:
-    name: Run tests in development environment with pipenv
+  test_devenv:
+    name: Run tests in development environment
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
@@ -69,7 +69,7 @@ jobs:
 
   dist:
     name: Python bdist/wheel
-    needs: [pre-commit, test_pipenv, test_general]
+    needs: [pre-commit, test_devenv, test_general]
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
@@ -110,6 +110,8 @@ jobs:
     if: github.event.ref == 'refs/heads/dev'
     runs-on: ubuntu-latest
     needs: [dist_check]
+    permissions:
+      id-token: write
     steps:
       - uses: actions/download-artifact@v4
         with:
@@ -118,16 +120,16 @@ jobs:
       - name: Publish distribution to Test PyPI
         uses: pypa/gh-action-pypi-publish@v1.13.0
         with:
-          user: __token__
-          password: ${{ secrets.test_pypi_token }}
-          repository_url: https://test.pypi.org/legacy/
-          skip_existing: true
+          repository-url: https://test.pypi.org/legacy/
+          skip-existing: true
 
 
   dist_upload_pypi:
     if: startsWith(github.event.ref, 'refs/tags')
     runs-on: ubuntu-latest
     needs: [dist_check]
+    permissions:
+      id-token: write
     steps:
       - uses: actions/download-artifact@v4
         with:
@@ -135,13 +137,8 @@ jobs:
           path: dist
       - name: Publish package to PyPI
         uses: pypa/gh-action-pypi-publish@v1.13.0
-        with:
-          user: __token__
-          password: ${{ secrets.pypi_token }}
       - name: Publish distribution to Test PyPI
         uses: pypa/gh-action-pypi-publish@v1.13.0
         with:
-          user: __token__
-          password: ${{ secrets.test_pypi_token }}
-          repository_url: https://test.pypi.org/legacy/
-          skip_existing: true
+          repository-url: https://test.pypi.org/legacy/
+          skip-existing: true