docs: add link to CircleCI guide on trusted publishing
meeech committed
Jun 4, 2026 at 12:00 UTC
c562c4be41dd7ca3fcba34e131ad7d6076e68229
1 file changed
+3
content/packages-and-modules/securing-your-code/trusted-publishers.mdx
+3
@@ -73,6 +73,8 @@ Configure the following fields:
73
- **Context IDs** (optional): Restrict publishing to jobs using specific CircleCI contexts. You may find them from your CircleCI Organization Settings Contexts.
74
- **Allowed actions** (required): Select which actions this trusted publisher can perform — `npm publish`, `npm stage publish`, or both. At least one must be selected.
75
76
+For more in-depth information see [CircleCI's guide](https://circleci.com/docs/guides/deploy/deploy-to-npm-registry/).
77
+
78
<Screenshot src="/packages-and-modules/securing-your-code/trusted-publisher-circleci.png" alt="Screenshot of CircleCI trusted publisher configuration form" />
79
80
<Note>
@@ -369,4 +371,5 @@ We intend to expand trusted publishing support to additional CI/CD providers and
371
- [GitHub Actions OIDC documentation](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect)
372
- [GitLab CI/CD OIDC documentation](https://docs.gitlab.com/ee/ci/cloud_services/)
373
- [CircleCI OIDC documentation](https://circleci.com/docs/openid-connect-tokens/)
374
+- [CircleCI guide to setting up npm trusted publishing](https://circleci.com/docs/guides/deploy/deploy-to-npm-registry/)
375
- [API documentation for exchanging OIDC ID token for npm registry token](https://api-docs.npmjs.com/#tag/registry.npmjs.org/operation/exchangeOidcToken)