Trusted Publishing — Eliminating Credentials from Your Release Workflow
ABOUT THIS EVENT
- WHO IT IS FOR: Software engineers, DevOps professionals, and open-source maintainers looking to secure their release pipelines.
- WHAT IT IS ABOUT: Transitioning to Trusted Publishing to eliminate the need for long-lived credentials in PyPI uploads.
- FORMAT: An informative technical talk and presentation.
Join us in New York City for an in-depth look at the evolution of secure software distribution. We will explore the rapid adoption of Trusted Publishing, a system that has seen a massive surge in usage among PyPI uploaders to enhance security and streamline workflows.
Learn how to move away from the risks associated with long-lived credentials and embrace a more modern, automated approach to publishing. This session will break down the shift in the ecosystem and provide actionable insights on eliminating credential-based vulnerabilities from your release pipeline.
EXPLORE MORE