Skip to content

Conversation

woodruffw
Copy link
Member

This adds an "Internals and Technical Details" page with both a high-level description of how trusted publishing works and a Q&A section with some pre-filled Q&As on the design of trusted publishing.

Closes #13470.

CC @di

@miketheman
Copy link
Member

question: ‏seeing as these are internal docs, should they be placed in a dev docs section instead?

@woodruffw
Copy link
Member Author

question: ‏seeing as these are internal docs, should they be placed in a dev docs section instead?

Possibly -- I wrote these more as "retrospective" details (for other package indices to benefit from) rather than concrete implementation details that would help a Warehouse contributor, but I have no strong opinion on where they actually belong 🙂

Copy link
Member

@di di left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We've gotten enough questions about this from regular users that I'm OK with them living in the user docs.

@di di enabled auto-merge (squash) May 1, 2023 15:20
@di di merged commit 31e4b27 into pypi:main May 1, 2023
@di di deleted the tob-explain-two-phase branch May 1, 2023 15:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Document why trusted publishing uses a "two phase" token exchange system
3 participants