#7033 ([PyPI] API token used to upload to project sphinxfeed-lsaffre despite Trusted Publishing enabled)

by Luc Saffre · in Developers · assigned to Luc Saffre

2 semaines, 6 jours ago by Luc Saffre about #7033 ([PyPI] API token used to upload to project sphinxfeed-lsaffre despite Trusted Publishing enabled) : The README file even describes how to release a new version to PyPI using a "Trusted Publisher", but I see this only now and I didn't know about trusted publishers. PyPI also can use GitLab as trusted publisher. Trusted publishing uses "the OpenID Connect (OIDC) standard to exchange short-lived iden...
2 semaines, 6 jours ago by Luc Saffre about #7033 ([PyPI] API token used to upload to project sphinxfeed-lsaffre despite Trusted Publishing enabled) : There is indeed a file .github/workflows/build.yml, which I don't understand fully. Seems to be a GH-specific feature. It has been added by Jordan Cook in July 2024.
2 semaines, 6 jours ago by Luc Saffre about #7033 ([PyPI] API token used to upload to project sphinxfeed-lsaffre despite Trusted Publishing enabled) : Created new Ticket #7033 ([PyPI] API token used to upload to project sphinxfeed-lsaffre despite Trusted Publishing enabled).