Fail CI when dependencies in your lockfile lose npm provenance or trusted publisher status
-
Updated
Oct 11, 2026 - TypeScript
#
trusted-publishing
Here are 42 public repositories matching this topic...
A composite GitHub Action that turns conventional commits into a draft release PR, tags the PR on merge, and stages publishing to npm via OIDC trusted publishing.
-
Updated
Oct 6, 2026 - TypeScript
cli npm-package developer-tools workflow-automation ai-agents ai-workflow trusted-publishing model-routing hermes-agent
-
Updated
May 18, 2026 - JavaScript
Audit, visualize, share, and track your npm org's trust signals.
-
Updated
Oct 11, 2026 - TypeScript
Consumer-side integrity verification for Ruby gems
ruby cli rubygems bundler security-audit provenance developer-tools software-supply-chain devsecops dependency-management slsa supply-chain-security sigstore integrity-verification trusted-publishing artifact-verification
-
Updated
Jun 21, 2026 - Ruby
A fast, conservative JSON repair library for malformed model output, hand-written config, and almost-JSON text. Repairs common syntax issues and returns clean Python objects.
python markdown cli parser json ai python-library configuration openai json-parser text-processing data-cleanup llm json-repair trusted-publishing malformed-json
-
Updated
Jul 25, 2026 - Python
Indexing support for Trusted Publishing on PyPI
-
Updated
Jul 1, 2026 - Python
npm Trusted Publishing (OIDC) manager — interactive wizard, batch binding, and a native TypeScript client for the npm trust API
-
Updated
Sep 20, 2026 - TypeScript
Easily compare the local devices windows release & build version, against broadly available official Windows 11 versioning. Detects silent updating-issues. This Repository also acts as the always up to date web-source of truth, it displays signed info accessible programmatically through designated GitHub pages.
python windows github-pages json-api pypi sysadmin compliance release-automation security-automation release-monitoring rmm windows-update windows-admin windows-11 github-actions win11 endpoint-management trusted-publishing microsoft-release-health
-
Updated
Oct 9, 2026 - Python
npm tokens will stop publishing in January 2027. go-tokenless switches your GitHub Actions to trusted publishing (OIDC) in one command. CLI, MCP server and Agent Skill.
npm mcp provenance release oidc github-actions mcp-server trusted-publishing claude-code-plugin gemini-cli-extension agent-skill npm-token
-
Updated
Oct 6, 2026 - TypeScript
Trusted Publishing for Docker registries using GitHub Actions OIDC.
-
Updated
Sep 2, 2026 - TypeScript
Get trusted publishing and build reproducibility insights for any Rust supply chain
-
Updated
Oct 8, 2026 - Rust
Publish npm workspace packages: only the ones the registry is missing. Resolves workspace: protocol dependencies and supports OIDC trusted publishing.
nodejs cli npm registry typescript monorepo ci-cd publish oidc npm-registry npm-publish workspaces github-actions github-packages release-please trusted-publishing
-
Updated
Oct 5, 2026 - TypeScript
AI-assisted OSS maintainer workflows for PR review, issue triage, security triage, and release notes.
oss supply-chain provenance openai maintainer-tools release-management codex security-tools security-review maintainers github-actions pull-request-review evals trusted-publishing issue-triage
-
Updated
Aug 17, 2026 - JavaScript
[PoC] Trusted Publishing verifier for package URLs (purl)
-
Updated
Nov 15, 2025 - TypeScript
QS-DMSS Studio: evidence-first simulation lab for reproducible runs, evidence bundles, campaign comparison, and research-object exports.
python validation simulation hpc reproducible-research pypi slurm open-science scientific-computing reproducibility dark-matter evidence research-software fastapi scientific-python trusted-publishing evidence-bundles campaign-studio research-objects quantum-scalar-dark-matter
-
Updated
Oct 10, 2026 - Python
Published npm artifact boundary for handshake-protocol-kernel; trusted publishing and MCP metadata.
-
Updated
Jul 21, 2026 - JavaScript
Read-only scanner: is your npm/PyPI publish CI ready for OIDC trusted publishing? (post classic-token revocation, Dec 9 2025)
npm pypi ci-cd provenance developer-tools release-automation oidc npm-publish github-actions supply-chain-security e403 sigstore trusted-publishing npm-token
-
Updated
Jun 30, 2026 - JavaScript
Advanced GitHub Actions and package supply-chain defense platform for the May 2026 CI/CD compromise wave.
ci-cd provenance oidc software-supply-chain devsecops react-dashboard github-actions fastapi supply-chain-security npm-security trusted-publishing pypi-security
-
Updated
May 8, 2026 - Python
Operational inventory, release policy, and audit tooling for BuiltByEcho npm packages
-
Updated
Jun 22, 2026 - JavaScript
Add this topic to your repo
To associate your repository with the trusted-publishing topic, visit your repo's landing page and select "manage topics."