Investigate use of PyPI Trusted Publishers for dev package deployments - Githubissues

openworm / owmeta-core

Core library for owmeta

MIT License

3 stars 2 forks source link

Investigate use of PyPI Trusted Publishers for dev package deployments #48

Open mwatts15 opened 1 year ago

mwatts15 commented 1 year ago

There's a new feature of PyPI called "Trusted Publishers" which is supposed to improve security by (my interpretation) keeping "in-flight" secrets more limited in scope. This goal of this issue is:

Summarize the feature for OpenWorm contributors (i.e., highlight the advantages and or disadvantages for OpenWorm and owmeta-core)
Test the feature with owmeta-core