Record · corpus.blog/posts/01a07df1-ef52-7079-bdf6-ecb7fa653a4a

Introducing 'Trusted Publishers'

PyPI Blog · published 19 August 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.pypi.org Wayback capture

8blogs citing

First cited: 28 Jul 2022
Most recent: 15 Jul 2026
Rank this month: not ranked
Links from this post: 9
Words captured: 676

Cited by

Blog

In the post

Date

phpunit.expert

Composer and Packagist under supply chain stress Read at the source ↗

15 Jul 2026

alpha-omega.dev

Trusted Publishing: Secure Rust Package Deployment Without Secrets Read at the source ↗

30 Sept 2025

Google Security Blog

Introducing OSS Rebuild: Open Source, Rebuilt to Last Read at the source ↗

21 Jul 2025

tiemoko.com

Tactical Trust (1 of 2): Platform Crypto for Developers Read at the source ↗

6 Jul 2025

rustfoundation.org

Strengthening Rust Security with Alpha-Omega: A Progress Update Read at the source ↗

12 May 2025

stfn.pl

I published my first package to PyPi Read at the source ↗

26 Nov 2024

Lucas Cimon

fpdf2 latest news Read at the source ↗

14 Oct 2024

embeddedinn.com

Creating the littlefs-tools Python package and auto-deploying it to PyPI with a CI/CD pipeline Read at the source ↗

28 Jul 2022

Links from this post

Link

Host

https://openid.net/connect/

openid.net

https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect

docs.github.com

https://github.com/marketplace/actions/pypi-publish

github.com

https://docs.pypi.org/trusted-publishers/using-a-publisher/

docs.pypi.org

https://docs.github.com/en/actions/deployment/targeting-different-environments/using-environments-for-deployment

docs.github.com

https://www.trailofbits.com/

trailofbits.com

https://github.com/woodruffw

github.com

https://github.com/webknjaz

github.com

https://docs.pypi.org/trusted-publishers/

docs.pypi.org