From 4c83a45e831534f328498fc9561ef6fa6084cd22 Mon Sep 17 00:00:00 2001 From: Mike Fiedler Date: Tue, 16 Sep 2025 17:32:32 -0400 Subject: [PATCH] Fix broken link to Trusted Publishers documentation --- docs/blog/posts/2025-09-16-github-actions-token-exfiltration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/blog/posts/2025-09-16-github-actions-token-exfiltration.md b/docs/blog/posts/2025-09-16-github-actions-token-exfiltration.md index 206853eb220c..432fb8012dd4 100644 --- a/docs/blog/posts/2025-09-16-github-actions-token-exfiltration.md +++ b/docs/blog/posts/2025-09-16-github-actions-token-exfiltration.md @@ -60,7 +60,7 @@ with GitHub Actions to help protect their projects in the future. If you use GitHub Actions to publish to PyPI, I recommend the following steps to protect your projects: -1. Replace long-lived tokens with [Trusted Publishers](https://docs.pypi.org/trusted-publishers/. +1. Replace long-lived tokens with [Trusted Publishers](https://docs.pypi.org/trusted-publishers/). This is the most effective way to protect your projects from this type of attack. GitHub Trusted Publishers use short-lived tokens that are scoped to a specific repository, and expire after a short period of time.