Skip to content

Commit e48932d

Browse files
committed
Revert "Add note on configuring id_tokens for npm"
This reverts commit dc2ac31.
1 parent dc2ac31 commit e48932d

File tree

1 file changed

+0
-6
lines changed

1 file changed

+0
-6
lines changed

content/packages-and-modules/securing-your-code/trusted-publishers.mdx

Lines changed: 0 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -139,12 +139,6 @@ publish:
139139

140140
The `id_tokens` configuration tells GitLab to generate an OIDC token for npm. Learn more in [GitLab's OIDC documentation](https://docs.gitlab.com/ee/ci/cloud_services/).
141141

142-
<Note>
143-
144-
**Note:** Don't forget to configure id_tokens 'aud' to `"npm:registry.npmjs.org"` in your GitLab pipeline.
145-
146-
</Note>
147-
148142
### Managing trusted publisher configurations
149143

150144
You can modify or remove your trusted publisher configuration at any time through your package settings on [npmjs.com](https://npmjs.com) → Packages → YOUR_PACKAGE → Settings → Trusted publishing. Each package can only have one trusted publisher connection at a time, but this connection can be edited or deleted as needed. To change providers (for example, switching from GitHub Actions to GitLab CI/CD), simply edit your existing configuration and select the new provider. The change takes effect immediately for future publishes. To remove trusted publishing entirely and return to token-based authentication, delete the trusted publisher configuration from your package settings.

0 commit comments

Comments
 (0)