Supported trusted publishing from GitHub Actions
Open
- Dominant language
- TypeScript
- Stars
- 193k
- Forks
- 42.4k
- PR merge metrics
- PR metrics pending
Description
Since PATs are not recommended and will be fully deprecated 2026-12-01, developers using GitHub need a way to configure trusted publishing to publish extensions to the VSCode marketplace.
only covers non-PAT publishing from Azure DevOps and, while GitHub users could configure pipelines to run, that's a big undertaking and harder to maintain just to publish. We can use trusted publishing for Rust crates, npm packages, .NET packages to nuget.org, and more. We need trusted publishing support to the marketplace as well.
Contributor guide
Assessment
This issue has not been assessed yet.