Fail CI when dependencies in your lockfile lose npm provenance or trusted publisher status
-
Updated
Aug 6, 2026 - TypeScript
#
trusted-publishing
Here are 32 public repositories matching this topic...
A composite GitHub Action that turns conventional commits into a draft release PR, tags the PR on merge, and stages publishing to npm via OIDC trusted publishing.
-
Updated
Aug 3, 2026 - TypeScript
cli npm-package developer-tools workflow-automation ai-agents ai-workflow trusted-publishing model-routing hermes-agent
-
Updated
May 18, 2026 - JavaScript
Consumer-side integrity verification for Ruby gems
ruby cli rubygems bundler security-audit provenance developer-tools software-supply-chain devsecops dependency-management slsa supply-chain-security sigstore integrity-verification trusted-publishing artifact-verification
-
Updated
Jun 21, 2026 - Ruby
Indexing support for Trusted Publishing on PyPI
-
Updated
Jul 1, 2026 - Python
A fast, conservative JSON repair library for malformed model output, hand-written config, and almost-JSON text. Repairs common syntax issues and returns clean Python objects.
python markdown cli parser json ai python-library configuration openai json-parser text-processing data-cleanup llm json-repair trusted-publishing malformed-json
-
Updated
Jul 25, 2026 - Python
Trusted Publishing for Docker registries using GitHub Actions OIDC.
-
Updated
Jul 29, 2026 - TypeScript
Get trusted publishing and build reproducibility insights for any Rust supply chain
-
Updated
Aug 8, 2026 - Rust
Publish npm workspace packages: only the ones the registry is missing. Resolves workspace: protocol dependencies and supports OIDC trusted publishing.
nodejs cli npm registry typescript monorepo ci-cd publish oidc npm-registry npm-publish workspaces github-actions github-packages release-please trusted-publishing
-
Updated
Aug 3, 2026 - TypeScript
Easily compare the local devices windows release & build version, against broadly available official Windows 11 versioning. Detects silent updating-issues. This Repository also acts as the always up to date web-source of truth, it displays signed info accessible programmatically through designated GitHub pages.
python windows github-pages json-api pypi sysadmin compliance release-automation security-automation release-monitoring rmm windows-update windows-admin windows-11 github-actions win11 endpoint-management trusted-publishing microsoft-release-health
-
Updated
Aug 8, 2026 - Python
AI-assisted OSS maintainer workflows for PR review, issue triage, security triage, and release notes.
oss supply-chain provenance openai maintainer-tools release-management codex security-tools security-review maintainers github-actions pull-request-review evals trusted-publishing issue-triage
-
Updated
Aug 3, 2026 - JavaScript
[PoC] Trusted Publishing verifier for package URLs (purl)
-
Updated
Nov 15, 2025 - TypeScript
Published npm artifact boundary for handshake-protocol-kernel; trusted publishing and MCP metadata.
-
Updated
Jul 21, 2026 - JavaScript
an example of using a trusted publishing (OIDC) to publish a package
-
Updated
Oct 27, 2025
Operational inventory, release policy, and audit tooling for BuiltByEcho npm packages
-
Updated
Jun 22, 2026 - JavaScript
Supply-chain-hardened release tool for JS/TS libraries. Multi-runner reproducible-build attestation, OIDC trusted publishing, hard pre-publish gates. Pure bash, zero dependencies.
bash npm provenance release release-automation oidc reproducible-builds npm-publish github-actions slsa secret-scanning supply-chain-security composite-action reusable-workflow trusted-publishing action-pinning hardened-release
-
Updated
Aug 1, 2026 - Shell
Clean starting template for Hawkynt's C# repositories: standard scaffolding, unified CI/nightly/release pipeline, and the shared nuget-publish Trusted Publishing action.
template csharp dotnet nuget ci-cd scaffolding lgpl repository-template github-actions trusted-publishing
-
Updated
Aug 1, 2026 - JavaScript
Advanced GitHub Actions and package supply-chain defense platform for the May 2026 CI/CD compromise wave.
ci-cd provenance oidc software-supply-chain devsecops react-dashboard github-actions fastapi supply-chain-security npm-security trusted-publishing pypi-security
-
Updated
May 8, 2026 - Python
Guide to publishing a CLI tool to seven channels: GitHub Releases, npm trusted publishing (OIDC), Homebrew, Scoop, winget, AUR, and Chocolatey
homebrew npm documentation aur guide publishing chocolatey provenance release-automation oidc scoop winget github-actions trusted-publishing
-
Updated
Jul 28, 2026 - Shell
Read-only scanner: is your npm/PyPI publish CI ready for OIDC trusted publishing? (post classic-token revocation, Dec 9 2025)
npm pypi ci-cd provenance developer-tools release-automation oidc npm-publish github-actions supply-chain-security e403 sigstore trusted-publishing npm-token
-
Updated
Jun 30, 2026 - JavaScript
Improve this page
Add a description, image, and links to the trusted-publishing topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the trusted-publishing topic, visit your repo's landing page and select "manage topics."