Tag

trusted-publisher

Safeguard articles tagged "trusted-publisher" — guides, analysis, and best practices for software supply chain and application security.

1 article

Concepts

What is a Trusted Publisher (PyPI and npm)

A trusted publisher lets your CI workflow publish packages with short-lived OIDC tokens instead of stored API keys. Here's how it works on PyPI and where npm stands.

May 21, 20257 min read