BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Open Source Security Foundation - ECPv6.17.2//NONSGML v1.0//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Open Source Security Foundation
X-ORIGINAL-URL:https://openssf.org
X-WR-CALDESC:Events for Open Source Security Foundation
REFRESH-INTERVAL;VALUE=DURATION:PT1H
X-Robots-Tag:noindex
X-PUBLISHED-TTL:PT1H
BEGIN:VTIMEZONE
TZID:UTC
BEGIN:STANDARD
TZOFFSETFROM:+0000
TZOFFSETTO:+0000
TZNAME:UTC
DTSTART:20250101T000000
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
DTSTART;TZID=UTC:20260826T180000
DTEND;TZID=UTC:20260826T200000
DTSTAMP:20260813T202747Z
CREATED:20260813T134549Z
LAST-MODIFIED:20260813T202747Z
UID:10000152-1787767200-1787774400@openssf.org
SUMMARY:Trusted Publishing — Eliminating Credentials from Your Release Workflow
DESCRIPTION:Community Hosting: ​This talk walks through setting up Trusted Publishers for GitHub Actions (as an example\, but others are available)\, explains the security model in accessible terms\, and shares case studies\, including how Sigstore integration enabled forensic investigation of the 2024 Ultralytics compromise. \n​Attendees will learn the step-by-step setup process\, common pitfalls and troubleshooting\, and migration strategies for maintainers with many packages. The session also covers why token removal is critical when Trusted Publishing in place\, and when restricted API tokens remain the appropriate fallback. Whether maintaining one package or a hundred\, attendees will leave with everything needed to adopt credential-free publishing.
URL:https://openssf.org/event/trusted-publishing-eliminating-credentials-from-your-release-workflow/
LOCATION:12 W 39th St\, New York\, New York\, 12 W 39th St\, New York\, NY\, United States
CATEGORIES:Community Events
ATTACH;FMTTYPE=image/avif:https://openssf.org/wp-content/uploads/2026/08/41b00f69-c6a2-4b2e-beac-cbfdc1dcd0bb.avif
END:VEVENT
END:VCALENDAR