Skip to content

Commit c562c4b

Browse files
meeechMichael Smith
authored andcommitted
docs: add link to CircleCI guide on trusted publishing
1 parent a54cc37 commit c562c4b

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

content/packages-and-modules/securing-your-code/trusted-publishers.mdx

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -73,6 +73,8 @@ Configure the following fields:
7373
- **Context IDs** (optional): Restrict publishing to jobs using specific CircleCI contexts. You may find them from your CircleCI Organization Settings Contexts.
7474
- **Allowed actions** (required): Select which actions this trusted publisher can perform — `npm publish`, `npm stage publish`, or both. At least one must be selected.
7575

76+
For more in-depth information see [CircleCI's guide](https://circleci.com/docs/guides/deploy/deploy-to-npm-registry/).
77+
7678
<Screenshot src="/packages-and-modules/securing-your-code/trusted-publisher-circleci.png" alt="Screenshot of CircleCI trusted publisher configuration form" />
7779

7880
<Note>
@@ -369,4 +371,5 @@ We intend to expand trusted publishing support to additional CI/CD providers and
369371
- [GitHub Actions OIDC documentation](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect)
370372
- [GitLab CI/CD OIDC documentation](https://docs.gitlab.com/ee/ci/cloud_services/)
371373
- [CircleCI OIDC documentation](https://circleci.com/docs/openid-connect-tokens/)
374+
- [CircleCI guide to setting up npm trusted publishing](https://circleci.com/docs/guides/deploy/deploy-to-npm-registry/)
372375
- [API documentation for exchanging OIDC ID token for npm registry token](https://api-docs.npmjs.com/#tag/registry.npmjs.org/operation/exchangeOidcToken)

0 commit comments

Comments
 (0)