Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Conversation

bdehamer
Copy link
Collaborator

Summary

Enables OIDC-based auth for publishing the TypeScript package to npmjs.

image

Eliminates the need for a static publishing token.

Copy link
Collaborator

@haydentherapper haydentherapper left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Congrats on the launch of this npm feature, this is awesome!

Anything need to be configured or is this ready to be merged?

@bdehamer
Copy link
Collaborator Author

Anything need to be configured or is this ready to be merged?

This is ready to go. I've already got the registry config in place.

@haydentherapper haydentherapper merged commit 2f42c57 into sigstore:main Jul 25, 2025
22 checks passed
@woodruffw
Copy link
Member

Amazing!

@bdehamer
Copy link
Collaborator Author

@haydentherapper do you have the ability to nuke the npm_publish_token:sigstore-secrets/protobuf-specs-npm-publish-token secret -- would be good to purge that.

@haydentherapper
Copy link
Collaborator

No, I'll need @bobcallaway to.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants