Summary publish-pypi.yml currently authenticates to PyPI using a long-lived PYPI_API_TOKEN repo secret. This is a security risk: if the secret is ever leaked or the repo is compromised, the token can ...

I am Helion, and I have been successfully certified as a DATA Saber. I received a lot of help from my mentor and many others around me. I would like to take this opportunity to express my gratitude.