Post #1889284
2025-10-14 16:07 UTC
@sethmlarson @miketheman @pypi @vagrantc I'm interested in (once again) publishing my own signed packages on PyPI -- does this happen to help there?
Replies (1)
-
@miketheman@hachyderm.io 2025-10-14 16:24
@meejah @sethmlarson The overall concepts are detailed here: https://docs.pypi.org/trusted-publishers/ TL,DR: using OIDC to generate short-lived access tokens to publish from known publishers, instead of holding on to long-lived API Tokens