Skip to content

Commit 504a718

Browse files
glaubinixIgorBenko
andauthored
Apply suggestions from code review
Co-authored-by: Igor Benko <igor.benko@gmail.com>
1 parent 7299cf1 commit 504a718

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

docs/api/trusted-publishing.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ defined by the Open Source Security Foundation (OpenSSF) and implemented by vari
99

1010
OIDC identity providers, CI services like GitHub Actions, can issue short-lived credentials, OIDC tokens, that Private Packagist
1111
can verify came from the CI service. Organizations on Private Packagist can configure to trust a workflow in a repository to publish a package.
12-
The workflow send an OIDC token to Private Packagist, where the token is matched against configured trusted publishers.
12+
The workflow sends an OIDC token to Private Packagist, where the token is matched against configured trusted publishers.
1313
If there is a match, Private Packagist will issue a short-lived API credential with limited scope.
1414
The issued API credential is valid for 15 minutes and can only access endpoints required to publish the artifact.
1515

@@ -34,14 +34,14 @@ Fill in the form fields to configure the publisher:
3434
* Owner name: The GitHub user or organization name that owns the repository.
3535
* Repository name: The name of the GitHub repository that contains the publishing workflow.
3636
* Continuous integration file: The filename of the publishing workflow, e.g. `publish.yaml`. The file must exist in the `.github/workflows/` directory.
37-
* Continuous integration environment name (optional): The name of the [GitHub Actions environment]((https://docs.github.com/en/actions/how-tos/deploy/configure-and-manage-deployments/manage-environments)) that the workflow uses.
37+
* Continuous integration environment name (optional): The name of the [GitHub Actions environment](https://docs.github.com/en/actions/how-tos/deploy/configure-and-manage-deployments/manage-environments) that the workflow uses.
3838

3939
## Configure your CI/CD workflow
4040

4141
### GitHub Actions
4242

43-
Private Packagist provides a GitHub Action, [packagist/artifact-publish-github-action](https://github.com/packagist/artifact-publish-github-action),
44-
that takes care of publishing the artifact for you. Just build the artifact and hand it over to the action. The action
43+
Private Packagist provides a GitHub Action [packagist/artifact-publish-github-action](https://github.com/packagist/artifact-publish-github-action),
44+
that takes care of publishing the artifact for you. Just build the artifact and hand its path over to the action. The action
4545
requires the `id-token: write` permission to generate OIDC tokens, more info about this in [GitHub's OIDC documentation](https://docs.github.com/en/actions/concepts/security/openid-connect).
4646

4747
```yaml

0 commit comments

Comments
 (0)