newrelic-ruby-agent icon indicating copy to clipboard operation
newrelic-ruby-agent copied to clipboard

Explore using RubyGems trusted publishers

Open hannahramadan opened this issue 2 years ago • 1 comments

RubyGems introduced trusted publishing, which can replace using secret credentials for publishing the agent. Let's set this up, document anything that needs to be kept in our secret sharing platform, and remove any code that is no longer needed.

Previous task: The agent uses a time-based one time password during the release process to Ruby Gems. Currently, the agent uses a Python OTP library, but let's be consistent with the agent and use a Ruby library!

This one looks pretty good: https://github.com/mdp/rotp

Impacted files:

  • release.yml
  • rubygems-authenticate.py

hannahramadan avatar May 08 '23 21:05 hannahramadan

https://issues.newrelic.com/browse/NEWRELIC-8488