https://curadevops.metacog.co.kr/tags/trusted-publishing/Recent content in Trusted-Publishing on CuraDevOpsHugoen-usThu, 01 Oct 2026 17:14:12 +0000https://curadevops.metacog.co.kr/insights/2026-10-01-opt-in-dist-tag-permissions-for-npm-trusted-publishing/Thu, 01 Oct 2026 17:14:12 +0000https://curadevops.metacog.co.kr/insights/2026-10-01-opt-in-dist-tag-permissions-for-npm-trusted-publishing/<ul> <li><strong>Platform/SRE — Skip</strong></li> <li><strong>CI/CD — Plan:</strong> New GA capability lets npm trusted publishing configs manage dist-tags (latest, next, beta promotion) with short-lived OIDC credentials instead of long-lived tokens — schedule adoption to reduce static secret exposure in publish workflows.</li> <li><strong>Leader — Skip</strong></li> </ul>https://curadevops.metacog.co.kr/insights/2026-09-04-multiple-trusted-publishing-configurations-for-npm/Fri, 04 Sep 2026 14:38:54 +0000https://curadevops.metacog.co.kr/insights/2026-09-04-multiple-trusted-publishing-configurations-for-npm/<ul> <li><strong>Platform/SRE — Skip</strong></li> <li><strong>CI/CD — Plan:</strong> Multiple trusted publishing configurations per npm package are now GA on GitHub, enabling more flexible provenance-backed release workflows; schedule a review of existing npm publish pipelines to adopt multi-config trusted publishing and reduce reliance on long-lived tokens.</li> <li><strong>Leader — Skip</strong></li> <li><strong>Signals:</strong> GA announcement</li> </ul>