Use trusted publishing #2
Description
Feature request
Use Case
We want to publish shemas to Strands in the most secure way without any long lived tokens.
Current state
We're about to provide long-lived tokens for publishing a version to a strand (strand scope tokens).
Proposed Solution
- https://django-oidc-provider.readthedocs.io/en/master/
- https://chatgpt.com/share/67487f44-b9ec-8008-9c14-beb4983b7481
- Possibly adapt https://github.com/pypa/gh-action-pypi-publish for the GHA side (and implement our own server-side code)