diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 9f014f0..bacb5be 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -4,21 +4,15 @@ on:
   release:
     types: [published]
 
-permissions: {}
+permissions:
+  contents: read
+  id-token: write
 
 jobs:
   publish:
-    name: Build and publish
-    runs-on: ubuntu-latest
-    environment:
-      name: pypi
-      url: https://pypi.org/project/ext_http_server/
     permissions:
-      id-token: write # trusted publishing to PyPI (no API token)
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
-        with:
-          fetch-depth: 0 # full history + tags so hatch-vcs can derive the version
-      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
-      - run: uv build
-      - run: uv publish --trusted-publishing always
+      contents: read
+      id-token: write
+    uses: bboe/.github/.github/workflows/pypi-publish.yml@main
+    with:
+      url: https://pypi.org/project/ext_http_server/