AcademySoftwareFoundation / AcademySoftwareFoundation/OpenColorIO

Modify PyPI wheel generation to use Trusted Publisher

Open
#2,079 0 comments 0 reactions 0 assignees View on GitHub
Build Issue Feature Request
Dominant language
C++
Stars
2.1k
Forks
503
PR merge metrics
No merged PRs in 30d

Description

PyPI's preferred way to upload wheels is their Trusted Publisher method. From their website: "PyPI package maintainers can adopt a new, more secure publishing method that does not require long-lived passwords or API tokens to be shared with external systems."

https://blog.pypi.org/posts/2023-04-20-introducing-trusted-publishers/

We should update OCIO to use this method.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.