Skip to content

ci: authenticate crates.io with OIDC - #31

Merged
fasterthanlime merged 1 commit into
mainfrom
fix/trusted-publishing-workflow
Aug 21, 2026
Merged

fasterthanlime merged 1 commit into
mainfrom
fix/trusted-publishing-workflow

Conversation

@fasterthanlime

Copy link
Copy Markdown
Contributor

Use crates.io trusted publishing in the release-plz release job.

  • grant id-token: write only to the publishing job
  • exchange the GitHub OIDC identity with rust-lang/crates-io-auth-action
  • pass its short-lived token to release-plz
  • remove the empty crates.io secret from the release-PR job

All 12 public crates are configured on crates.io for bearcove/dibs and .github/workflows/release-plz.yml. actionlint .github/workflows/release-plz.yml passes.

@fasterthanlime
fasterthanlime merged commit 70331ed into main Aug 21, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants