4 ms·
A little late reply: Preferably I do not use a client on my machine to publish a package. That’s what I meant, modern registries should always support working
by merb 2mo ago
A little late reply:
Preferably I do not use a client on my machine to publish a package. That’s what I meant, modern registries should always support working with oidc providers to support publishing credentials from ci/cd systems.
Sometimes called trusted publishing: https://repos.openssf.org/trusted-publishers-for-all-package-repositories https://repos.openssf.org/trusted-publishers-for-all-package...