actions/pypi-publish
1
0
Fork 0
mirror of https://github.com/pypa/gh-action-pypi-publish.git synced 2024-12-28 18:04:50 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #147 from trail-of-forks/tob-stabilize-oidc

Browse source 
README, oidc-exchange: remove beta references
This commit is contained in:
Sviatoslav Sydorenko 2023-04-22 18:56:18 -06:00 committed by GitHub
commit 3b6670b0bd
WARNING! Although there is a key with this ID in the database it does not verify this commit! This commit is SUSPICIOUS.
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 1 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
README.md
View file

@ -67,10 +67,6 @@ settings page of your project on GitHub. See [Creating & using secrets].
### Trusted publishing
> **IMPORTANT**: This functionality is in beta, and will not work for you
> unless you're a member of the PyPI trusted publishing beta testers' group.
> For more information, see [warehouse#12965].
> **NOTE**: Trusted publishing is sometimes referred to by its
> underlying technology -- OpenID Connect, or OIDC for short.
> If you see references to "OIDC publishing" in the context of PyPI,

2
oidc-exchange.py
View file

@ -96,7 +96,7 @@ def assert_successful_audience_call(resp: requests.Response, domain: str):
match resp.status_code:
case HTTPStatus.FORBIDDEN:
# This index supports OIDC, but forbids the client from using
# it (either because it's disabled, limited to a beta group, etc.)
# it (either because it's disabled, ratelimited, etc.)
die(
f"audience retrieval failed: repository at {domain} has trusted publishing disabled",
)