Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature]: Update deploy release action to use OpenID Connect #960

Closed
3 tasks done
rly opened this issue Oct 4, 2023 · 1 comment
Closed
3 tasks done

[Feature]: Update deploy release action to use OpenID Connect #960

rly opened this issue Oct 4, 2023 · 1 comment
Assignees

Comments

@rly
Copy link
Contributor

rly commented Oct 4, 2023

What would you like to see added to HDMF?

PyPI will require all users to enable a form of two-factor authentication on their accounts by the end of 2023. We can't use 2FA when using GitHub Actions to upload releases to PyPI. Instead, we need to use PyPI's Trusted Publishing using OpenID Connect to upload releases to PyPI.

https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/
https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-pypi

Doesn't look too hard to do, but will require some testing with the test PyPI server on all repos.

Is your feature request related to a problem?

No response

What solution would you like?

See above

Do you have any interest in helping implement the feature?

Yes.

Code of Conduct

@rly
Copy link
Contributor Author

rly commented Jan 24, 2024

This was resolved by @mavaylon1

@rly rly closed this as completed Jan 24, 2024
@rly rly removed this from the 3.14.0 milestone Apr 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant