Token Exchange
I don't always publish packages, but when I do, it's securely.
Complete this quick check once to start playing.
You play as a PyPI package maintainer who must exchange identity tokens using the OpenID Connect standard to publish packages. You must navigate the complexities of securely publishing packages without sharing long-lived passwords or API tokens. The game takes place in a tech environment where you must use your strategic skills to configure PyPI to trust an identity provided by a given OpenID Connect Identity Provider (IdP).
