Replies: 9 comments 9 replies
This comment has been hidden.
This comment has been hidden.
|
❤️❤️❤️ THANK YOU ❤️❤️❤️ |
This comment was marked as off-topic.
This comment was marked as off-topic.
|
Trusted publishing with CircleCI is a big win for security removing stored credentials and using OIDC makes the pipeline much safer and cleaner. |
|
thats awesome |
|
@leobalter thanks for getting this out. feedback: Since |
|
When will you support self hosted runners on Github Actions? |
|
@leobalter CircleCI trusted publishing is still not working for me for monorepo packages! Claims in Trusted publishing config copied from npmjs.com: I also tried adding the context id to the trusted publishing config, same result. I have no |
|
System mode should be default at least eventually. |

I did a double check with the team and this is working as intended.
Please take a look at the docs from https://circleci.com/docs/guides/deploy/deploy-to-npm-registry/ at the "SSH rerun restrictions" section.
For security it's important that npm rejects OIDC tokens from SSH reruns.