Trusted publishing for npm packages using  OpenID Connect (OIDC)
				
			
			
			
			
			
				
					Under Review
					
						
							October 20, 2025
						
					
				
				
			 
			
			
				
					Currently Github Actions and Gitlab CI/CD support NPM Trusted publishing using OpenID Connect (OIDC).  Codefresh becoming a trusted publisher would be helpful. See https://docs.npmjs.com/trusted-publishers for more details.