Skip to content

Commit

Permalink
README, oidc-exchange: remove beta references
Browse files Browse the repository at this point in the history
Signed-off-by: William Woodruff <william@trailofbits.com>
  • Loading branch information
woodruffw committed Apr 21, 2023
1 parent c542b72 commit fe431ff
Show file tree
Hide file tree
Showing 2 changed files with 1 addition and 10 deletions.
9 changes: 0 additions & 9 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -67,15 +67,6 @@ settings page of your project on GitHub. See [Creating & using secrets].

### Trusted publishing

> **IMPORTANT**: This functionality is in beta, and will not work for you
> unless you're a member of the PyPI trusted publishing beta testers' group.
> For more information, see [warehouse#12965].

> **NOTE**: Trusted publishing is sometimes referred to by its
> underlying technology -- OpenID Connect, or OIDC for short.
> If you see references to "OIDC publishing" in the context of PyPI,
> this is what they're referring to.

This action supports PyPI's [trusted publishing]
implementation, which allows authentication to PyPI without a manually
configured API token or username/password combination. To perform
Expand Down
2 changes: 1 addition & 1 deletion oidc-exchange.py
Original file line number Diff line number Diff line change
Expand Up @@ -96,7 +96,7 @@ def assert_successful_audience_call(resp: requests.Response, domain: str):
match resp.status_code:
case HTTPStatus.FORBIDDEN:
# This index supports OIDC, but forbids the client from using
# it (either because it's disabled, limited to a beta group, etc.)
# it (either because it's disabled, ratelimited, etc.)
die(
f"audience retrieval failed: repository at {domain} has trusted publishing disabled",
)
Expand Down

0 comments on commit fe431ff

Please sign in to comment.