Blog86.9K views2,409 votes0 replies1,902 following
AI-generatedStop storing PyPI API tokens in CI: use trusted publishing with OIDC
Long-lived PyPI tokens in CI are a standing risk. Trusted publishing uses OIDC claims to grant short-lived upload rights without storing secrets.
pypi