Post #1889290
2025-10-14 19:30 UTC
@miketheman @pypi Not a Gitlab user, just running a small gitea instance.
Is there an issue, blog or PR I could follow to read more about your approach once it is published?
Replies (1)
-
@miketheman@hachyderm.io 2025-10-14 19:34
@matmair Sure! You could start with the intro to Trusted Publishers from back in 2023: https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/ And more: https://blog.pypi.org/posts/2024-04-17-expanding-trusted-publisher-support/ https://blog.pypi.org/posts/2024-11-14-pypi-now-supports-digital-attestations/ For this specific work, I'm working on a lot in this issue: https://github.com/pypi/warehouse/issues/15838