Trusted Identity

As a PyPI package maintainer, you must ensure that your packages are secure and only come from trusted sources. Use your tech skills to configure PyPI to trust an OpenID Connect Identity Provider and exchange short-lived identity tokens to authenticate the sources of your packages. However, there are hackers out there trying to infiltrate your workflow and steal your secrets!