Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: pypa/gh-action-pypi-publish
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v1.8.4
Choose a base ref
...
head repository: pypa/gh-action-pypi-publish
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v1.8.5
Choose a head ref
  • 10 commits
  • 3 files changed
  • 4 contributors

Commits on Apr 1, 2023

  1. oidc-exchange: more explanation 

    Signed-off-by: William Woodruff <william@trailofbits.com>
    @woodruffw
    woodruffw committed Apr 1, 2023
    Configuration menu
    Copy the full SHA
    67b747a View commit details
    Browse the repository at this point in the history

  2. twine-upload: expound 

    Signed-off-by: William Woodruff <william@trailofbits.com>
    @woodruffw
    woodruffw committed Apr 1, 2023
    Configuration menu
    Copy the full SHA
    3d567f4 View commit details
    Browse the repository at this point in the history

Commits on Apr 2, 2023

  1. Apply suggestions from code review 

    Co-authored-by: Sviatoslav Sydorenko <wk.cvs.github@sydorenko.org.ua>
    @woodruffw @webknjaz
    woodruffw and webknjaz authored Apr 2, 2023
    Configuration menu
    Copy the full SHA
    dfde872 View commit details
    Browse the repository at this point in the history

Commits on Apr 3, 2023

  1. Merge pull request #142 from trail-of-forks/tob-indicate-oidc 

    Add explanation of why the OIDC publishing was chosen to the log output.
    @webknjaz
    webknjaz authored Apr 3, 2023
    Configuration menu
    Copy the full SHA
    69efb8c View commit details
    Browse the repository at this point in the history

  2. README: replace OIDC with "trusted publishing" 

    Also updates the link to reference the public documentation
for trusted publishing, rather than the PyPI short help
section (which also needs to be updated).

Signed-off-by: William Woodruff <william@trailofbits.com>
    @woodruffw
    woodruffw committed Apr 3, 2023
    Configuration menu
    Copy the full SHA
    4372cb5 View commit details
    Browse the repository at this point in the history

  3. oidc-exchange, twine-upload: remove more OIDC refs 

    ...but not all, since some make sense in a debugging
context.

Signed-off-by: William Woodruff <william@trailofbits.com>
    @woodruffw
    woodruffw committed Apr 3, 2023
    Configuration menu
    Copy the full SHA
    0b567d5 View commit details
    Browse the repository at this point in the history

  4. Apply suggestions from code review 

    Co-authored-by: Sviatoslav Sydorenko <wk.cvs.github@sydorenko.org.ua>
    @woodruffw @webknjaz
    woodruffw and webknjaz authored Apr 3, 2023
    Configuration menu
    Copy the full SHA
    a0f29a5 View commit details
    Browse the repository at this point in the history

  5. README: retitle, add note 

    Signed-off-by: William Woodruff <william@trailofbits.com>
    @woodruffw
    woodruffw committed Apr 3, 2023
    Configuration menu
    Copy the full SHA
    89ddbea View commit details
    Browse the repository at this point in the history

  6. oidc-exchange: another link 

    Signed-off-by: William Woodruff <william@trailofbits.com>
    @woodruffw
    woodruffw committed Apr 3, 2023
    Configuration menu
    Copy the full SHA
    30c3822 View commit details
    Browse the repository at this point in the history

  7. Merge pull request #143 from trail-of-forks/tob-rewrite-oidc-refs 

    This patch updates the user-facing OIDC mentions with the new "Trusted Publishing" term
to make it cohesive with how the PyPI docs names things now.
    @webknjaz
    webknjaz authored Apr 3, 2023
    Configuration menu
    Copy the full SHA
    0bf742b View commit details
    Browse the repository at this point in the history
Loading