Trusty Packages
Never trust a password. Trust the code.
As a PyPI package maintainer, you need to publish your latest package update. But instead of relying on the common username and password combination, you opt for the more secure trusted publishing method using OpenID Connect. Now you need to solve a series of programming puzzles and challenges to generate the required identity token and publish your package to PyPI. But be careful, one wrong move and the token expires, forcing you to start over again!
