blackmwk commented on issue #2863: URL: https://github.com/apache/iceberg-rust/issues/2863#issuecomment-5041387589
> We can harden the publishing by removing the API token (from the github workflow) after the first version publish. And enable trusted publishing for all new versions It's somehow difficult to automate it in github workflow. If we want save a token in github secrets, then it becomes meaningless. If we don't save a token forever, for each release with new crates, we need to write code to adjust the workflow, it's still manual effort. So I prefer to keep it as is for now, and publish manually when we have new crates. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
