TRUSTED PUBLISHINGOPENID CONNECT (OIDC)PYPI+2 moreHow PyPI Trusts GitHub Releases Without API TokensPyPI uses GitHub OpenID Connect short-lived credentials to bind publishing permissions to auditable workflows.Sep 7, 2026, 08:33:22 PM
