Self hosted runners are an essential security and performance stance for any reasonable organization.
Ignoring this use-case in the trusted publisher is a huge gap. It forces people to downgrade their security to use trusted publishing, or to do other kinds of hacks, or perhaps even deprecating npmjs as a publishing platform.
I was double surprised to learn that this isn't tracked or covered by any issue, bug. The docs say something about "future versions", but don't contain any insight to what that exactly means.
Self hosted runners are an essential security and performance stance for any reasonable organization.
Ignoring this use-case in the trusted publisher is a huge gap. It forces people to downgrade their security to use trusted publishing, or to do other kinds of hacks, or perhaps even deprecating npmjs as a publishing platform.
I was double surprised to learn that this isn't tracked or covered by any issue, bug. The docs say something about "future versions", but don't contain any insight to what that exactly means.