good first issuehelp wanted
仓库指标
- Star
- (3,469 star)
- PR 合并指标
- (30 天内没有已合并 PR)
描述
All of our PyPI-packaged projects should use trusted publishing, rather than a manually configured API token.
Example trusted publishing workflow:
https://github.com/trailofbits/blight/blob/master/.github/workflows/release.yml
Resources:
- https://docs.pypi.org/trusted-publishers/
- https://packaging.python.org/en/latest/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/
Marking as "help wanted" due to maintenance status.