Comment Comment by detente18 It was the PYPI_PUBLISH token which was in our github project as an env var, that got sent to trivvy.We have deleted all our pypi publishing tokens.Our accounts had 2fa, so it's a bad token here.We're reviewing our accounts, to see how we can make it more secure (trusted publishing via jwt tokens, move to a different pypi account, etc.). parent detente18 7 months ago
We have deleted all our pypi publishing tokens.
Our accounts had 2fa, so it's a bad token here.
We're reviewing our accounts, to see how we can make it more secure (trusted publishing via jwt tokens, move to a different pypi account, etc.).