Plan
archived
GitHub npm trusted publishing gains multiple configs (GA)
- Platform/SRE — Skip
- CI/CD — Plan: Multiple trusted publishing configurations per npm package are now GA on GitHub, enabling more flexible provenance-backed release workflows; schedule a review of existing npm publish pipelines to adopt multi-config trusted publishing and reduce reliance on long-lived tokens.
- Leader — Skip
- Signals: GA announcement
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.