Post #2869149

@silmathoron@floss.social you are correct that you always need to secure your repository permissions regardless. With this facet of Shai-Hulud, repositories' stored secrets were exposed, and Trusted Publishing removes the need to store secrets at all.