Skip to content
Trusted publishing: a new benchmark for packaging security
blog.trailofbits.com | blog | #supply-chain | #pypi | #authentication | #python | #package-management | #supply-chain-security | #trusted-publishing | #oidc | #credential-management | #ecosystem-security
Summary
Trail of Bits partnered with PyPI on trusted publishing, an OIDC-based auth method that removes long-lived API tokens, cutting supply chain attack and credential leak risks in package releases.
- Published
- Collected