#trustedpublishers — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #trustedpublishers, aggregated by home.social.
-
Its a bit weird that #GitHub spearheaded #OIDC based authentication to retrieve short lived tokens for cloud platforms and then #PyPi, #RubyGems and even #Dart went and used that to enable short lived tokens for publishing packages – but GitHub themselves haven't yet launched it for #npm
@openssf has even launched a #TrustedPublishers guideline: https://repos.openssf.org/trusted-publishers-for-all-package-repositories
https://blog.rubygems.org/2023/12/14/trusted-publishing.html
-
Its a bit weird that #GitHub spearheaded #OIDC based authentication to retrieve short lived tokens for cloud platforms and then #PyPi, #RubyGems and even #Dart went and used that to enable short lived tokens for publishing packages – but GitHub themselves haven't yet launched it for #npm
@openssf has even launched a #TrustedPublishers guideline: https://repos.openssf.org/trusted-publishers-for-all-package-repositories
https://blog.rubygems.org/2023/12/14/trusted-publishing.html
-
Its a bit weird that #GitHub spearheaded #OIDC based authentication to retrieve short lived tokens for cloud platforms and then #PyPi, #RubyGems and even #Dart went and used that to enable short lived tokens for publishing packages – but GitHub themselves haven't yet launched it for #npm
@openssf has even launched a #TrustedPublishers guideline: https://repos.openssf.org/trusted-publishers-for-all-package-repositories
https://blog.rubygems.org/2023/12/14/trusted-publishing.html
-
Its a bit weird that #GitHub spearheaded #OIDC based authentication to retrieve short lived tokens for cloud platforms and then #PyPi, #RubyGems and even #Dart went and used that to enable short lived tokens for publishing packages – but GitHub themselves haven't yet launched it for #npm
@openssf has even launched a #TrustedPublishers guideline: https://repos.openssf.org/trusted-publishers-for-all-package-repositories
https://blog.rubygems.org/2023/12/14/trusted-publishing.html
-
Just released: #cherry_picker 2.3.0 🚀
This tool creates backports for CPython when the Miss Islington bot can't, usually due to a merge conflict.
🍒 Add support for #Python 3.13, drop EOL 3.8
🍒 Resolve usernames when remote ends with a trailing slash
🍒 Optimize validate_sha() with --max-count=1
🍒 Remove multiple commit prefixes
🍒 Handle whitespace when calculating usernames
🍒 Publish to PyPI using #TrustedPublishers
🍒 Generate #PEP740 attestations
🍒 And more! -
Just released: #cherry_picker 2.3.0 🚀
This tool creates backports for CPython when the Miss Islington bot can't, usually due to a merge conflict.
🍒 Add support for #Python 3.13, drop EOL 3.8
🍒 Resolve usernames when remote ends with a trailing slash
🍒 Optimize validate_sha() with --max-count=1
🍒 Remove multiple commit prefixes
🍒 Handle whitespace when calculating usernames
🍒 Publish to PyPI using #TrustedPublishers
🍒 Generate #PEP740 attestations
🍒 And more! -
Just released: #cherry_picker 2.3.0 🚀
This tool creates backports for CPython when the Miss Islington bot can't, usually due to a merge conflict.
🍒 Add support for #Python 3.13, drop EOL 3.8
🍒 Resolve usernames when remote ends with a trailing slash
🍒 Optimize validate_sha() with --max-count=1
🍒 Remove multiple commit prefixes
🍒 Handle whitespace when calculating usernames
🍒 Publish to PyPI using #TrustedPublishers
🍒 Generate #PEP740 attestations
🍒 And more! -
Just released: #cherry_picker 2.3.0 🚀
This tool creates backports for CPython when the Miss Islington bot can't, usually due to a merge conflict.
🍒 Add support for #Python 3.13, drop EOL 3.8
🍒 Resolve usernames when remote ends with a trailing slash
🍒 Optimize validate_sha() with --max-count=1
🍒 Remove multiple commit prefixes
🍒 Handle whitespace when calculating usernames
🍒 Publish to PyPI using #TrustedPublishers
🍒 Generate #PEP740 attestations
🍒 And more! -
🥚🐰🛞🐍 Exciting!
I'm doing the first @pillow release using cibuildwheel + PyPI publish GitHub Action + Trusted Publishers!
It'll take just under three hours to build 68 wheels and an sdist, and then upload them automatically to @pypi 🤞
The matrix covers CPython 3.8-3.12, PyPy 3.9-3.10, manylinux, musllinux, macOS Intel + Apple Silicon, Windows 32-bit + 64-bit + ARM...
Follow along the Easter fun at https://github.com/python-pillow/Pillow/actions/runs/8506382482 !
#Python #Pillow #PythonPillow #PyPI #TrustedPublishers #cibuildwheel
-
🥚🐰🛞🐍 Exciting!
I'm doing the first @pillow release using cibuildwheel + PyPI publish GitHub Action + Trusted Publishers!
It'll take just under three hours to build 68 wheels and an sdist, and then upload them automatically to @pypi 🤞
The matrix covers CPython 3.8-3.12, PyPy 3.9-3.10, manylinux, musllinux, macOS Intel + Apple Silicon, Windows 32-bit + 64-bit + ARM...
Follow along the Easter fun at https://github.com/python-pillow/Pillow/actions/runs/8506382482 !
#Python #Pillow #PythonPillow #PyPI #TrustedPublishers #cibuildwheel
-
🥚🐰🛞🐍 Exciting!
I'm doing the first @pillow release using cibuildwheel + PyPI publish GitHub Action + Trusted Publishers!
It'll take just under three hours to build 68 wheels and an sdist, and then upload them automatically to @pypi 🤞
The matrix covers CPython 3.8-3.12, PyPy 3.9-3.10, manylinux, musllinux, macOS Intel + Apple Silicon, Windows 32-bit + 64-bit + ARM...
Follow along the Easter fun at https://github.com/python-pillow/Pillow/actions/runs/8506382482 !
#Python #Pillow #PythonPillow #PyPI #TrustedPublishers #cibuildwheel
-
🥚🐰🛞🐍 Exciting!
I'm doing the first @pillow release using cibuildwheel + PyPI publish GitHub Action + Trusted Publishers!
It'll take just under three hours to build 68 wheels and an sdist, and then upload them automatically to @pypi 🤞
The matrix covers CPython 3.8-3.12, PyPy 3.9-3.10, manylinux, musllinux, macOS Intel + Apple Silicon, Windows 32-bit + 64-bit + ARM...
Follow along the Easter fun at https://github.com/python-pillow/Pillow/actions/runs/8506382482 !
#Python #Pillow #PythonPillow #PyPI #TrustedPublishers #cibuildwheel
-
Exciting news from #PyPI, just in time for @PyConUS:
"Starting today, PyPI package maintainers can adopt a new, more secure publishing method that does not require long-lived passwords or API tokens to be shared with external systems."
I've been part of the private beta and it works really well!
https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/
-
Exciting news from #PyPI, just in time for @PyConUS:
"Starting today, PyPI package maintainers can adopt a new, more secure publishing method that does not require long-lived passwords or API tokens to be shared with external systems."
I've been part of the private beta and it works really well!
https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/
-
Exciting news from #PyPI, just in time for @PyConUS:
"Starting today, PyPI package maintainers can adopt a new, more secure publishing method that does not require long-lived passwords or API tokens to be shared with external systems."
I've been part of the private beta and it works really well!
https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/
-
Exciting news from #PyPI, just in time for @PyConUS:
"Starting today, PyPI package maintainers can adopt a new, more secure publishing method that does not require long-lived passwords or API tokens to be shared with external systems."
I've been part of the private beta and it works really well!
https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/