Scene Image

Trusted Packages

I'm not paranoid, I'm just data obsessed

Take control of PyPI as the lead package maintainer and ensure the security of your packages using trusted publishing methods. Delegate trust to a third-party OpenID Connect Identity Provider (IdP), configure PyPI to trust the identity provided by that IdP, and effectively manage the release workflows of your packages to ensure their secure delivery.