From 8f7ea207f260cf0ef37cd006492b433c1e51ac54 Mon Sep 17 00:00:00 2001
From: Renzo F <45401804+rennf93@users.noreply.github.com>
Date: Wed, 7 Oct 2026 19:42:57 +0200
Subject: [PATCH 1/3] chore: point workflow at Guard-Core org post-transfer

---
 .github/workflows/upstream-drift.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/upstream-drift.yml b/.github/workflows/upstream-drift.yml
index 1ef70ea..20cd83f 100644
--- a/.github/workflows/upstream-drift.yml
+++ b/.github/workflows/upstream-drift.yml
@@ -30,7 +30,7 @@ jobs:
       - name: Checkout guard-core@master
         uses: actions/checkout@v7
         with:
-          repository: rennf93/guard-core
+          repository: Guard-Core/guard-core
           ref: master
           path: guard-core-upstream
           persist-credentials: false

From 0409653f441ee3e00e7234f4f42d37f08d35fc84 Mon Sep 17 00:00:00 2001
From: Renzo F <45401804+rennf93@users.noreply.github.com>
Date: Wed, 7 Oct 2026 19:42:59 +0200
Subject: [PATCH 2/3] chore: point workflow at Guard-Core org post-transfer

---
 .github/workflows/container-release.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/container-release.yml b/.github/workflows/container-release.yml
index a9fc73a..cc3f66c 100644
--- a/.github/workflows/container-release.yml
+++ b/.github/workflows/container-release.yml
@@ -64,10 +64,10 @@ jobs:
           IMAGE_NAME=$(docker images --format "{{.Repository}}:{{.Tag}}" | grep "flaskapi-guard-example" | head -n 1)
           echo "Using image: ${IMAGE_NAME}"
 
-          docker tag ${IMAGE_NAME} ghcr.io/${{ github.repository_owner }}/flaskapi-guard-example:latest
-          docker push ghcr.io/${{ github.repository_owner }}/flaskapi-guard-example:latest
+          docker tag ${IMAGE_NAME} ghcr.io/guard-core/flaskapi-guard-example:latest
+          docker push ghcr.io/guard-core/flaskapi-guard-example:latest
 
           if [[ "${{ env.IS_RELEASE }}" == "true" ]]; then
-            docker tag ${IMAGE_NAME} ghcr.io/${{ github.repository_owner }}/flaskapi-guard-example:${{ env.VERSION }}
-            docker push ghcr.io/${{ github.repository_owner }}/flaskapi-guard-example:${{ env.VERSION }}
+            docker tag ${IMAGE_NAME} ghcr.io/guard-core/flaskapi-guard-example:${{ env.VERSION }}
+            docker push ghcr.io/guard-core/flaskapi-guard-example:${{ env.VERSION }}
           fi

From 304c8d2d3684499f736c9f4dbe2100897f23ce5f Mon Sep 17 00:00:00 2001
From: Renzo F <45401804+rennf93@users.noreply.github.com>
Date: Wed, 7 Oct 2026 19:44:23 +0200
Subject: [PATCH 3/3] ci: publish to PyPI via OIDC trusted publishing

---
 .github/workflows/release.yml | 12 +++---------
 1 file changed, 3 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 025c738..dad8917 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-latest
-    # environment: pypi
+    environment: pypi
     permissions:
       id-token: write
       contents: read
@@ -24,20 +24,14 @@ jobs:
       - name: Install dependencies
         run: |
           python -m pip install --upgrade pip
-          pip install build twine
+          pip install build
 
       - name: Build package
         run: |
           python -m build
 
       - name: Publish package
-        env:
-          TWINE_USERNAME: ${{ secrets.TWINE_USERNAME }}
-          TWINE_PASSWORD: ${{ secrets.TWINE_PASSWORD }}
-        run: |
-          twine upload dist/*
-          echo "VERSION=${{ github.event.release.tag_name }}" >> $GITHUB_ENV
-
+        uses: pypa/gh-action-pypi-publish@release/v1
       - name: Get and Update Version
         id: get_version
         run: |