Configure Pypi trusted publishing pipeline

sarugaku / shellingham

Tool to Detect Surrounding Shell

ISC License

227 stars 33 forks source link

Configure Pypi trusted publishing pipeline #84

Closed michaelfeil closed 6 months ago

michaelfeil commented 7 months ago

When looking at this repo, I found that it has:

like 0.5B Downloads and Pypi
no trusted_publishing pipeline

Would it make sense to introduce one - I'll not enumerate the benefits, assuming they are known for the benefits and don't want to expose how to get the PYPI Token from the CI.

https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/ https://docs.pypi.org/trusted-publishers/

uranusjr commented 7 months ago

Mind contributing some configurations to kick start this?