diff --git a/docs/trusted-publishers-for-all-package-repositories.md b/docs/trusted-publishers-for-all-package-repositories.md index ff922ff..ec3f647 100644 --- a/docs/trusted-publishers-for-all-package-repositories.md +++ b/docs/trusted-publishers-for-all-package-repositories.md @@ -2,7 +2,7 @@ Authors: [Seth Michael Larson (Python Software Foundation)](https://github.com/sethmlarson) -Last updated: July 2024 +Last updated: May 2025 Trusted Publishers is a new authentication method that builds on the existing OpenID Connect standard (OIDC) for user infrastructure publishing to public package repositories (e.g. CI publishing to PyPI, as opposed to maintainers publishing from their system or Homebrew's centralized builds). Authentication is performed by exchanging OIDC identity tokens for short-lived and tightly scoped API tokens for authenticating with package repository publishing APIs. Using short-lived API tokens removes the need to share long-lived and potentially highly privileged API tokens with external systems when publishing software.