Org-scoped test package for validating CircleCI OIDC trusted publishing against the real npm registry.
Used for bug-bashing the CircleCI trusted publisher UI flows on wubwub (org-scoped scenarios). This package is connected to CircleCI and publishes via OIDC token exchange — no long-lived npm tokens.
Connect this repo to CircleCI and run the debug-workflow to get claim values.
| Field | Value |
|---|---|
| Org ID | TBD — run debug-workflow |
| Project ID | TBD — run debug-workflow |
| Pipeline Definition ID | TBD — run debug-workflow |
Configure the trusted publisher on npmjs.com with the org-id and project-id from the debug workflow.
Publishes to the real npm registry. Only runs on main.
Decodes and prints OIDC token claims — use to get the values needed for trusted publisher configuration.
- circleci-trust-publish-test — user-scoped version (
@owlstronaut) - Bug bash tasks: #14717, #14719