lodestar
lodestar copied to clipboard
Migrate classic npm tokens on actions/workflows to OpenID Connect Auth
As announced by NPM, they are requiring package maintainers to review CI/CD pipelines that use classic long-lived npm tokens. They will be revoking these for npm publishers soon and we'll need to migrate all of our repos to using trusted publishing for our Github actions.
This issue is to track migration of these repos to OIDC:
- [ ] ChainSafe/benchmark
- [ ] ChainSafe/biomejs-config
- [ ] ChainSafe/bls
- [x] ChainSafe/blst-ts
- [ ] ChainSafe/bun-ffi-z
- [ ] ChainSafe/discv5
- [x] ChainSafe/hashtree-js
- [ ] ChainSafe/is-ip
- [ ] ChainSafe/js-libp2p-gossipsub
- [x] ChainSafe/js-libp2p-noise
- [x] ChainSafe/js-libp2p-yamux
- [ ] ChainSafe/libp2p-quic
- [ ] ChainSafe/lodestar
- [ ] ChainSafe/node-prometheus-gc-stats
- [ ] ChainSafe/pubkey-index-map
- [ ] ChainSafe/ssz
- [x] ChainSafe/swap-or-not-shuffle
- [x] ChainSafe/xdelta3-node