@owlstronaut/circleci-trust-publish-test
v0.1.0
Published
Test package for CircleCI trusted publishing validation against the real npm registry
Downloads
29
Maintainers
Readme
@owlstronaut/circleci-trust-publish-test
Test package for validating CircleCI OIDC trusted publishing against the real npm registry.
Purpose
Used for bug-bashing the CircleCI trusted publisher UI flows on wubwub. This package is connected to CircleCI and publishes via OIDC token exchange — no long-lived npm tokens.
Setup
1. CircleCI
- Create a project on CircleCI connected to the
owlstronaut/circleci-trust-publish-testGitHub repo - Enable OIDC in project settings
- Run the
debug-workflowfirst to get claim values (org-id, project-id)
2. npm Trusted Publishing
Configure the trusted publisher on npmjs.com with the org-id and project-id from the debug workflow.
Workflows
publish-workflow
Publishes to the real npm registry. Only runs on main.
debug-workflow
Decodes and prints OIDC token claims — use to get the values needed for trusted publisher configuration.
Related
- trust-publish-test — original test package (sandbox)
- Bug bash tasks: #14717, #14718, #14719, #14720, #14721
