PyPI: Expanding Trusted Publisher Support Posted by woodruffw on Wednesday April 17, 2024 @12:20PM from the blog.pypi.org dept. https://blog.pypi.org/posts/2024-04-17-expanding-trusted-publisher-support/ ( 1 comment | 5 points | on HN )
Now developers just need to make sure they secure their code at the pipeline level. Pipeline compromise = package compromise.