2 ms·
This is coming imminently but appreciate the feedback & will push to get this landed here quickly. That said, our client does support OIDC publishing if your re
by clarke78 2mo ago
This is coming imminently but appreciate the feedback & will push to get this landed here quickly. That said, our client does support OIDC publishing if your registry does so hopefully you'll still find value there as it's a major step up from legacy npm clients.
- merb 2mo agoA little late reply: Preferably I do not use a client on my machine to publish a package. That’s what I meant, modern registries should always support working with oidc providers to support publishing credentials from ci/cd systems. Sometimes called trusted publishing: https://repos.openssf.org/trusted-publishers-for-all-package-repositories https://repos.openssf.org/trusted-publishers-for-all-package...