@owlstronaut-test-org/circleci-trust-publish-test
v0.1.0
Published
Test package for CircleCI trusted publishing validation (org-scoped)
Readme
@owlstronaut-test-org/circleci-trust-publish-test
Org-scoped test package for validating CircleCI OIDC trusted publishing against the real npm registry.
Purpose
Used for bug-bashing the CircleCI trusted publisher UI flows on wubwub (org-scoped scenarios). This package is connected to CircleCI and publishes via OIDC token exchange — no long-lived npm tokens.
Setup
1. CircleCI
Connect this repo to CircleCI and run the debug-workflow to get claim values.
| Field | Value | |-------|-------| | Org ID | TBD — run debug-workflow | | Project ID | TBD — run debug-workflow | | Pipeline Definition ID | TBD — run debug-workflow |
2. npm Trusted Publishing
Configure the trusted publisher on npmjs.com with the org-id and project-id from the debug workflow.
Workflows
publish-workflow
Publishes to the real npm registry. Only runs on main.
debug-workflow
Decodes and prints OIDC token claims — use to get the values needed for trusted publisher configuration.
Related
- circleci-trust-publish-test — user-scoped version (
@owlstronaut) - Bug bash tasks: #14717, #14719
