Read-only scanner: is your npm/PyPI publish CI ready for OIDC trusted publishing? (post classic-token revocation, Dec 9 2025)
npm pypi ci-cd provenance developer-tools release-automation oidc npm-publish github-actions supply-chain-security e403 sigstore trusted-publishing npm-token
-
Updated
Jun 30, 2026 - JavaScript