Comment by sevg
21 hours ago
FYI it was actually William Woodruff (the article author) and his team at Trail of Bits that worked with PyPI to implement Trusted Publishing.
21 hours ago
FYI it was actually William Woodruff (the article author) and his team at Trail of Bits that worked with PyPI to implement Trusted Publishing.
And here's the video for his talk about it at PackagingCon 2023: https://www.youtube.com/watch?v=Fa9cI2Rf2qc