From c3dc54cbbd84f9547373af7445832455ea6347bd Mon Sep 17 00:00:00 2001
From: "george.robertson1" <50412379+georgeRobertson@users.noreply.github.com>
Date: Mon, 9 Mar 2026 12:14:04 +0000
Subject: [PATCH] ci: switch ci-publish to manual run only and fix id-token
 syntax

---
 .github/workflows/ci_publish.yml | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci_publish.yml b/.github/workflows/ci_publish.yml
index e8d6f47..eb397a8 100644
--- a/.github/workflows/ci_publish.yml
+++ b/.github/workflows/ci_publish.yml
@@ -1,8 +1,6 @@
 name: CI Publish
 
-on:
-  release:
-    types: [published]
+on: workflow_dispatch
 
 jobs:
   build:
@@ -47,7 +45,7 @@ jobs:
       name: pypi
       url: https://pypi.org/org/nhs/data-validation-engine
     permissions:
-      id_token: write   # IMPORTANT: mandatory for trusted publishing
+      id-token: write   # IMPORTANT: mandatory for trusted publishing
     steps:
       - name: download dist
         uses: actions/download-artifact@v6