README: re-add OIDC note

Signed-off-by: William Woodruff <william@trailofbits.com>
This commit is contained in:
William Woodruff 2023-04-22 07:27:01 -06:00
parent fe431ff9ad
commit c008c2f40a
No known key found for this signature in database

View file

@ -67,6 +67,11 @@ settings page of your project on GitHub. See [Creating & using secrets].
### Trusted publishing
> **NOTE**: Trusted publishing is sometimes referred to by its
> underlying technology -- OpenID Connect, or OIDC for short.
> If you see references to "OIDC publishing" in the context of PyPI,
> this is what they're referring to.
This action supports PyPI's [trusted publishing]
implementation, which allows authentication to PyPI without a manually
configured API token or username/password combination. To perform