tag: Trusted-Publishing · 2 items
- Platform/SRE — Skip
- CI/CD — Plan: New GA capability lets npm trusted publishing configs manage dist-tags (latest, next, beta promotion) with short-lived OIDC credentials instead of long-lived tokens — schedule adoption to reduce static secret exposure in publish workflows.
- Leader — Skip
- Platform/SRE — Skip
- CI/CD — Plan: Multiple trusted publishing configurations per npm package are now GA on GitHub, enabling more flexible provenance-backed release workflows; schedule a review of existing npm publish pipelines to adopt multi-config trusted publishing and reduce reliance on long-lived tokens.
- Leader — Skip
- Signals: GA announcement