Merge pull request #40 from browserstack/LOC-6563-rubygems-trusted-publishing

CD: switch gem-push to RubyGems Trusted Publishing (OIDC)

Author: yashdsaraf

.github/workflows/gem-push.yml

@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: read
-      packages: write
+      id-token: write
 
     steps:
     - uses: actions/checkout@v3
@@ -17,13 +17,9 @@ jobs:
       with:
         ruby-version: 2.6.10
 
-    - name: Publish to RubyGems
+    - uses: rubygems/configure-rubygems-credentials@v2.0.0
+    - name: Build and push gem
       run: |
-        mkdir -p $HOME/.gem
-        touch $HOME/.gem/credentials
-        chmod 0600 $HOME/.gem/credentials
-        printf -- "---\n:rubygems_api_key: ${GEM_HOST_API_KEY}\n" > $HOME/.gem/credentials
         gem build *.gemspec
         gem push *.gem
-      env:
-        GEM_HOST_API_KEY: "${{secrets.RUBYGEMS_AUTH_TOKEN}}"
+      shell: bash