Expose trustpub_data field on version APIs

Turbo87 · Turbo87 · commit af34f96ef2d4 · 2025-07-04T16:12:21.000+02:00
diff --git a/src/snapshots/crates_io__openapi__tests__openapi_snapshot-2.snap b/src/snapshots/crates_io__openapi__tests__openapi_snapshot-2.snap
@@ -1148,6 +1148,13 @@ expression: response.json()
               "null"
             ]
           },
+          "trustpub_data": {
+            "description": "Information about the trusted publisher that published this version, if any.\n\nStatus: **Unstable**\n\nThis field is filled if the version was published via trusted publishing\n(e.g., GitHub Actions) rather than a regular API token.\n\nThe exact structure of this field depends on the `provider` field\ninside it.",
+            "type": [
+              "object",
+              "null"
+            ]
+          },
           "updated_at": {
             "description": "The date and time this version was last updated (i.e. yanked or unyanked).",
             "example": "2019-12-13T13:46:41Z",
diff --git a/src/tests/krate/publish/snapshots/crates_io__tests__krate__publish__edition__edition_is_saved-4.snap b/src/tests/krate/publish/snapshots/crates_io__tests__krate__publish__edition__edition_is_saved-4.snap
@@ -49,6 +49,7 @@ expression: response.json()
     "readme_path": "/api/v1/crates/foo/1.0.0/readme",
     "repository": null,
     "rust_version": "1.0",
+    "trustpub_data": null,
     "updated_at": "[datetime]",
     "yank_message": null,
     "yanked": false
diff --git a/src/tests/krate/publish/snapshots/crates_io__tests__krate__publish__links__crate_with_links_field-3.snap b/src/tests/krate/publish/snapshots/crates_io__tests__krate__publish__links__crate_with_links_field-3.snap
@@ -49,6 +49,7 @@ expression: response.json()
     "readme_path": "/api/v1/crates/foo/1.0.0/readme",
     "repository": null,
     "rust_version": null,
+    "trustpub_data": null,
     "updated_at": "[datetime]",
     "yank_message": null,
     "yanked": false
diff --git a/src/tests/krate/publish/snapshots/crates_io__tests__krate__publish__manifest__boolean_readme-4.snap b/src/tests/krate/publish/snapshots/crates_io__tests__krate__publish__manifest__boolean_readme-4.snap
@@ -49,6 +49,7 @@ expression: response.json()
     "readme_path": "/api/v1/crates/foo/1.0.0/readme",
     "repository": null,
     "rust_version": "1.69",
+    "trustpub_data": null,
     "updated_at": "[datetime]",
     "yank_message": null,
     "yanked": false
diff --git a/src/tests/krate/publish/snapshots/crates_io__tests__krate__publish__manifest__lib_and_bin_crate-4.snap b/src/tests/krate/publish/snapshots/crates_io__tests__krate__publish__manifest__lib_and_bin_crate-4.snap
@@ -52,6 +52,7 @@ expression: response.json()
     "readme_path": "/api/v1/crates/foo/1.0.0/readme",
     "repository": null,
     "rust_version": null,
+    "trustpub_data": null,
     "updated_at": "[datetime]",
     "yank_message": null,
     "yanked": false
diff --git a/src/tests/krate/publish/snapshots/crates_io__tests__krate__publish__trustpub__full_flow-9.snap b/src/tests/krate/publish/snapshots/crates_io__tests__krate__publish__trustpub__full_flow-9.snap
@@ -31,6 +31,12 @@ expression: response.json()
     "readme_path": "/api/v1/crates/foo/1.1.0/readme",
     "repository": null,
     "rust_version": null,
+    "trustpub_data": {
+      "provider": "github",
+      "repository": "rust-lang/foo-rs",
+      "run_id": "example-run-id",
+      "sha": "example-sha"
+    },
     "updated_at": "[datetime]",
     "yank_message": null,
     "yanked": false
diff --git a/src/tests/krate/snapshots/crates_io__tests__krate__yanking__patch_version_yank_unyank-2.snap b/src/tests/krate/snapshots/crates_io__tests__krate__yanking__patch_version_yank_unyank-2.snap
@@ -62,6 +62,7 @@ expression: json
     "description": "description",
     "homepage": null,
     "documentation": null,
-    "repository": null
+    "repository": null,
+    "trustpub_data": null
   }
 }
diff --git a/src/tests/krate/snapshots/crates_io__tests__krate__yanking__patch_version_yank_unyank-3.snap b/src/tests/krate/snapshots/crates_io__tests__krate__yanking__patch_version_yank_unyank-3.snap
@@ -73,6 +73,7 @@ expression: json
     "description": "description",
     "homepage": null,
     "documentation": null,
-    "repository": null
+    "repository": null,
+    "trustpub_data": null
   }
 }
diff --git a/src/tests/krate/snapshots/crates_io__tests__krate__yanking__patch_version_yank_unyank-4.snap b/src/tests/krate/snapshots/crates_io__tests__krate__yanking__patch_version_yank_unyank-4.snap
@@ -73,6 +73,7 @@ expression: json
     "description": "description",
     "homepage": null,
     "documentation": null,
-    "repository": null
+    "repository": null,
+    "trustpub_data": null
   }
 }
diff --git a/src/tests/krate/snapshots/crates_io__tests__krate__yanking__patch_version_yank_unyank-5.snap b/src/tests/krate/snapshots/crates_io__tests__krate__yanking__patch_version_yank_unyank-5.snap
@@ -84,6 +84,7 @@ expression: json
     "description": "description",
     "homepage": null,
     "documentation": null,
-    "repository": null
+    "repository": null,
+    "trustpub_data": null
   }
 }
diff --git a/src/tests/krate/snapshots/crates_io__tests__krate__yanking__patch_version_yank_unyank-6.snap b/src/tests/krate/snapshots/crates_io__tests__krate__yanking__patch_version_yank_unyank-6.snap
@@ -84,6 +84,7 @@ expression: json
     "description": "description",
     "homepage": null,
     "documentation": null,
-    "repository": null
+    "repository": null,
+    "trustpub_data": null
   }
 }
diff --git a/src/tests/krate/snapshots/crates_io__tests__krate__yanking__patch_version_yank_unyank.snap b/src/tests/krate/snapshots/crates_io__tests__krate__yanking__patch_version_yank_unyank.snap
@@ -62,6 +62,7 @@ expression: json
     "description": "description",
     "homepage": null,
     "documentation": null,
-    "repository": null
+    "repository": null,
+    "trustpub_data": null
   }
 }
diff --git a/src/tests/routes/crates/snapshots/crates_io__tests__routes__crates__read__include_default_version-2.snap b/src/tests/routes/crates/snapshots/crates_io__tests__routes__crates__read__include_default_version-2.snap
@@ -71,6 +71,7 @@ expression: response.json()
       "readme_path": "/api/v1/crates/foo_default_version/0.5.1/readme",
       "repository": null,
       "rust_version": null,
+      "trustpub_data": null,
       "updated_at": "[datetime]",
       "yank_message": null,
       "yanked": false
diff --git a/src/tests/routes/crates/snapshots/crates_io__tests__routes__crates__read__show-2.snap b/src/tests/routes/crates/snapshots/crates_io__tests__routes__crates__read__show-2.snap
@@ -84,6 +84,7 @@ expression: response.json()
       "readme_path": "/api/v1/crates/foo_show/0.5.1/readme",
       "repository": null,
       "rust_version": null,
+      "trustpub_data": null,
       "updated_at": "[datetime]",
       "yank_message": null,
       "yanked": false
@@ -122,6 +123,7 @@ expression: response.json()
       "readme_path": "/api/v1/crates/foo_show/0.5.0/readme",
       "repository": null,
       "rust_version": null,
+      "trustpub_data": null,
       "updated_at": "[datetime]",
       "yank_message": null,
       "yanked": false
@@ -154,6 +156,7 @@ expression: response.json()
       "readme_path": "/api/v1/crates/foo_show/1.0.0/readme",
       "repository": null,
       "rust_version": null,
+      "trustpub_data": null,
       "updated_at": "[datetime]",
       "yank_message": null,
       "yanked": false
diff --git a/src/tests/routes/crates/snapshots/crates_io__tests__routes__crates__read__show_all_yanked-2.snap b/src/tests/routes/crates/snapshots/crates_io__tests__routes__crates__read__show_all_yanked-2.snap
@@ -83,6 +83,7 @@ expression: response.json()
       "readme_path": "/api/v1/crates/foo_show/0.5.0/readme",
       "repository": null,
       "rust_version": null,
+      "trustpub_data": null,
       "updated_at": "[datetime]",
       "yank_message": null,
       "yanked": true
@@ -121,6 +122,7 @@ expression: response.json()
       "readme_path": "/api/v1/crates/foo_show/1.0.0/readme",
       "repository": null,
       "rust_version": null,
+      "trustpub_data": null,
       "updated_at": "[datetime]",
       "yank_message": null,
       "yanked": true
diff --git a/src/tests/routes/crates/snapshots/crates_io__tests__routes__crates__reverse_dependencies__prerelease_versions_not_included_in_reverse_dependencies-2.snap b/src/tests/routes/crates/snapshots/crates_io__tests__routes__crates__reverse_dependencies__prerelease_versions_not_included_in_reverse_dependencies-2.snap
@@ -55,6 +55,7 @@ expression: response.json()
       "readme_path": "/api/v1/crates/c3/1.0.0/readme",
       "repository": null,
       "rust_version": null,
+      "trustpub_data": null,
       "updated_at": "[datetime]",
       "yank_message": null,
       "yanked": false
diff --git a/src/tests/routes/crates/snapshots/crates_io__tests__routes__crates__reverse_dependencies__reverse_dependencies-2.snap b/src/tests/routes/crates/snapshots/crates_io__tests__routes__crates__reverse_dependencies__reverse_dependencies-2.snap
@@ -55,6 +55,7 @@ expression: response.json()
       "readme_path": "/api/v1/crates/c2/1.1.0/readme",
       "repository": null,
       "rust_version": null,
+      "trustpub_data": null,
       "updated_at": "[datetime]",
       "yank_message": null,
       "yanked": false
diff --git a/src/tests/routes/crates/snapshots/crates_io__tests__routes__crates__reverse_dependencies__reverse_dependencies_includes_published_by_user_when_present-2.snap b/src/tests/routes/crates/snapshots/crates_io__tests__routes__crates__reverse_dependencies__reverse_dependencies_includes_published_by_user_when_present-2.snap
@@ -67,6 +67,7 @@ expression: response.json()
       "readme_path": "/api/v1/crates/c3/3.0.0/readme",
       "repository": null,
       "rust_version": null,
+      "trustpub_data": null,
       "updated_at": "[datetime]",
       "yank_message": null,
       "yanked": false
@@ -99,6 +100,7 @@ expression: response.json()
       "readme_path": "/api/v1/crates/c2/2.0.0/readme",
       "repository": null,
       "rust_version": null,
+      "trustpub_data": null,
       "updated_at": "[datetime]",
       "yank_message": null,
       "yanked": false
diff --git a/src/tests/routes/crates/snapshots/crates_io__tests__routes__crates__reverse_dependencies__reverse_dependencies_query_supports_u64_version_number_parts-2.snap b/src/tests/routes/crates/snapshots/crates_io__tests__routes__crates__reverse_dependencies__reverse_dependencies_query_supports_u64_version_number_parts-2.snap
@@ -55,6 +55,7 @@ expression: response.json()
       "readme_path": "/api/v1/crates/c2/1.0.18446744073709551615/readme",
       "repository": null,
       "rust_version": null,
+      "trustpub_data": null,
       "updated_at": "[datetime]",
       "yank_message": null,
       "yanked": false
diff --git a/src/tests/routes/crates/snapshots/crates_io__tests__routes__crates__reverse_dependencies__reverse_dependencies_when_old_version_doesnt_depend_but_new_does-2.snap b/src/tests/routes/crates/snapshots/crates_io__tests__routes__crates__reverse_dependencies__reverse_dependencies_when_old_version_doesnt_depend_but_new_does-2.snap
@@ -55,6 +55,7 @@ expression: response.json()
       "readme_path": "/api/v1/crates/c2/2.0.0/readme",
       "repository": null,
       "rust_version": null,
+      "trustpub_data": null,
       "updated_at": "[datetime]",
       "yank_message": null,
       "yanked": false
diff --git a/src/tests/routes/crates/snapshots/crates_io__tests__routes__crates__reverse_dependencies__yanked_versions_not_included_in_reverse_dependencies-2.snap b/src/tests/routes/crates/snapshots/crates_io__tests__routes__crates__reverse_dependencies__yanked_versions_not_included_in_reverse_dependencies-2.snap
@@ -55,6 +55,7 @@ expression: response.json()
       "readme_path": "/api/v1/crates/c2/2.0.0/readme",
       "repository": null,
       "rust_version": null,
+      "trustpub_data": null,
       "updated_at": "[datetime]",
       "yank_message": null,
       "yanked": false
diff --git a/src/tests/routes/crates/versions/snapshots/crates_io__tests__routes__crates__versions__list__versions-2.snap b/src/tests/routes/crates/versions/snapshots/crates_io__tests__routes__crates__versions__list__versions-2.snap
@@ -36,6 +36,7 @@ expression: response.json()
       "readme_path": "/api/v1/crates/foo_versions/1.0.0/readme",
       "repository": null,
       "rust_version": "1.64",
+      "trustpub_data": null,
       "updated_at": "[datetime]",
       "yank_message": null,
       "yanked": false
@@ -74,6 +75,7 @@ expression: response.json()
       "readme_path": "/api/v1/crates/foo_versions/0.5.1/readme",
       "repository": null,
       "rust_version": null,
+      "trustpub_data": null,
       "updated_at": "[datetime]",
       "yank_message": null,
       "yanked": false
@@ -112,6 +114,7 @@ expression: response.json()
       "readme_path": "/api/v1/crates/foo_versions/0.5.0/readme",
       "repository": null,
       "rust_version": null,
+      "trustpub_data": null,
       "updated_at": "[datetime]",
       "yank_message": null,
       "yanked": false
diff --git a/src/tests/routes/crates/versions/snapshots/crates_io__tests__routes__crates__versions__read__show_by_crate_name_and_semver_no_published_by.snap b/src/tests/routes/crates/versions/snapshots/crates_io__tests__routes__crates__versions__read__show_by_crate_name_and_semver_no_published_by.snap
@@ -31,6 +31,7 @@ expression: json
     "readme_path": "/api/v1/crates/foo_vers_show_no_pb/1.0.0/readme",
     "repository": null,
     "rust_version": null,
+    "trustpub_data": null,
     "updated_at": "[datetime]",
     "yank_message": null,
     "yanked": false
diff --git a/src/tests/routes/crates/versions/snapshots/crates_io__tests__routes__crates__versions__read__show_by_crate_name_and_version.snap b/src/tests/routes/crates/versions/snapshots/crates_io__tests__routes__crates__versions__read__show_by_crate_name_and_version.snap
@@ -37,6 +37,7 @@ expression: json
     "readme_path": "/api/v1/crates/foo_vers_show/2.0.0/readme",
     "repository": null,
     "rust_version": "1.64",
+    "trustpub_data": null,
     "updated_at": "[datetime]",
     "yank_message": null,
     "yanked": false
diff --git a/src/views.rs b/src/views.rs
@@ -1,7 +1,7 @@
 use crate::external_urls::remove_blocked_urls;
 use crate::models::{
     ApiToken, Category, Crate, Dependency, DependencyKind, Keyword, Owner, ReverseDependency, Team,
-    TopVersions, User, Version, VersionDownload, VersionOwnerAction,
+    TopVersions, TrustpubData, User, Version, VersionDownload, VersionOwnerAction,
 };
 use chrono::{DateTime, Utc};
 use crates_io_github as github;
@@ -912,6 +912,18 @@ pub struct EncodableVersion {
     /// The URL to the crate's repository, if set.
     #[schema(example = "https://github.com/serde-rs/serde")]
     pub repository: Option<String>,
+
+    /// Information about the trusted publisher that published this version, if any.
+    ///
+    /// Status: **Unstable**
+    ///
+    /// This field is filled if the version was published via trusted publishing
+    /// (e.g., GitHub Actions) rather than a regular API token.
+    ///
+    /// The exact structure of this field depends on the `provider` field
+    /// inside it.
+    #[schema(value_type = Option<Object>)]
+    pub trustpub_data: Option<TrustpubData>,
 }
 
 impl EncodableVersion {
@@ -942,6 +954,7 @@ impl EncodableVersion {
             homepage,
             documentation,
             repository,
+            trustpub_data,
             ..
         } = version;
 
@@ -976,6 +989,7 @@ impl EncodableVersion {
             homepage,
             documentation,
             repository,
+            trustpub_data,
             published_by: published_by.map(User::into),
             audit_actions: audit_actions
                 .into_iter()
@@ -1119,6 +1133,7 @@ mod tests {
                     .unwrap()
                     .and_utc(),
             }],
+            trustpub_data: None,
         };
         let json = serde_json::to_string(&ver).unwrap();
         assert_some!(json.as_str().find(r#""updated_at":"2017-01-06T14:23:11Z""#));

Original file line number	Diff line number	Diff line change
`@@ -62,6 +62,7 @@ expression: json`
`62`	`62`	`"description": "description",`
`63`	`63`	`"homepage": null,`
`64`	`64`	`"documentation": null,`
`65`		`- "repository": null`
	`65`	`+ "repository": null,`
	`66`	`+ "trustpub_data": null`
`66`	`67`	`}`
`67`	`68`	`}`
Original file line number	Diff line number	Diff line change
`@@ -73,6 +73,7 @@ expression: json`
`73`	`73`	`"description": "description",`
`74`	`74`	`"homepage": null,`
`75`	`75`	`"documentation": null,`
`76`		`- "repository": null`
	`76`	`+ "repository": null,`
	`77`	`+ "trustpub_data": null`
`77`	`78`	`}`
`78`	`79`	`}`
Original file line number	Diff line number	Diff line change
`@@ -84,6 +84,7 @@ expression: json`
`84`	`84`	`"description": "description",`
`85`	`85`	`"homepage": null,`
`86`	`86`	`"documentation": null,`
`87`		`- "repository": null`
	`87`	`+ "repository": null,`
	`88`	`+ "trustpub_data": null`
`88`	`89`	`}`
`89`	`90`	`}`