Setting GitHub as a trusted publisher for npm (opens in new tab)

So, stuff happened and npm has been updated to reduce the volume of stuff happening. In a world of SBOMs, SLSA, and supply chain attacks, it's time to get serious about publishing packages. In this case, that means using the new Trusted Publisher feature to connect GitHub (or GitLab) to npm. Set the trusted publisher on npm Sign into npm Select the package you want to set up, for example astro-accelerator-utils Click Settings In the Trusted Publishers section, select your provider, in my case...