FYI, using a reusable workflow to publish to PyPI is not supported by trusted publishing.
With trusted publishing enabled, the pypa/gh-action-pypi-publish will
- create and upload attestations
- warn if a token is given (its not needed for trusted publishing)
- run
twine check on the uploaded wheels and/or sdist
Originally posted by @2bndy5 in #39 (comment)