Auditing GitHub-to-PyPI Publishing Paths After the LiteLLM Supply-Chain Attack

A defensive audit of GitHub-to-PyPI publishing paths after reports that a LiteLLM GitHub key stayed valid for months and was linked to a PyPI compromise. Trace repo write to workflow execution, secrets injection, and index upload; then run the checks: inventory publishing workflows, grep for long-lived credentials and history, verify OIDC trusted publishing, read effective GITHUB_TOKEN permissions, and require environment reviewers. Includes a deliberately weak lab workflow and the safer permissions and OIDC pattern. Read the full write-up: https://hackyjs.com/posts/auditing-github-to-pypi-publishing-paths-after-the-litellm-supply-chain-attack

Read the post →