[CI][Python] Investigate trusted publishing for uploading wheels to PyPI
Open
Component: Continuous Integration
Component: Packaging
Component: Python
Type: enhancement
- Dominant language
- C++
- Stars
- 17.1k
- Forks
- 4.3k
- Avg merge
- 3d 13h
- Merged PRs (30d)
- 88
Description
### Describe the enhancement requested
"Trusted publishing" may help improve the security of wheel uploads, and also provide automated digital attestations.
See https://discuss.python.org/t/pypi-now-supports-digital-attestations/71158 and https://trailofbits.github.io/are-we-pep740-yet/ .
It might make it either easier or harder to publish releases, however :)
### Component(s)
Continuous Integration, Packaging, Python
Contributor guide
Assessment
This issue has not been assessed yet.