OIDC: Add documentation + guidance for using GitHub's OpenID Connect provider with PyPI

[woodruffw]

Code of Conduct

• I have read and agree to the GitHub Docs project's Code of Conduct

What article on docs.github.com is affected?

"Security Hardening with OpenID Connect": https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect

What part(s) of the article would you like to see updated?

I'm filing this issue to track a PR that I'll create. That PR will:

• Update the "main" OIDC documentation page to indicate that federation with PyPI is a supported use case;
• Link to a new guide (which I'll write) for using GitHub's OIDC provider with PyPI for tokenless package publishing

Additional information

None!

CC @MylesBorins @steiza

[welcome]

Thanks for opening this issue. A GitHub docs team member should be by to give feedback soon. In the meantime, please check out the contributing guidelines.

[Hazamabert]

Code of Conduct

• I have read and agree to the GitHub Docs project's Code of Conduct

What article on docs.github.com is affected?

"Security Hardening with OpenID Connect": https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect

What part(s) of the article would you like to see updated?

I'm filing this issue to track a PR that I'll create. That PR will:

• Update the "main" OIDC documentation page to indicate that federation with PyPI is a supported use case;
• Link to a new guide (which I'll write) for using GitHub's OIDC provider with PyPI for tokenless package publishing

Additional information

None!

CC @MylesBorins @steiza

https://tekan88.net/RF1026A7A3A

[woodruffw]

I've opened #24595, but it looks like it's stalled because the OIDC docs don't have third-party contributions enabled + the branch comes from a fork on an organization, which doesn't allow edits by upstream maintainers.

[woodruffw]

Opened #24772 as a "fix"; it just comes from a fork hosted on my username rather than a discrete org.

[github-actions]

A stale label has been added to this issue becuase it has been open for 60 days with no activity. To keep this issue open, add a comment within 3 days.