nginx / nginx/nginx-directive-reference
use NPM "trusted publishers" instead of tokens
Open
@ryepup is already working on this.
Since May 22, 2026.
github_actions
- Dominant language
- Go
- Stars
- 12
- Forks
- 3
- Avg merge
- 7h 59m
- Merged PRs (30d)
- 4
Description
Is your feature request related to a problem? Please describe
The CI pipelines uses a deprecated approach to publishing npm packages, and required manual effort every 90d to update the token.
Describe the solution you'd like
NPM has a better option based on OIDC: https://docs.npmjs.com/trusted-publishers
Describe alternatives you've considered
Runbooks, github issue templates
Additional context
Not many people have access to this repo, so the more automation the better.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.