npm-trusted-publishers

Validate npm OIDC trusted publishing configuration in GitHub Actions workflows.

4|Updated Feb 15, 2026
One-click install
npx skills add https://github.com/d-o-hub/chaotic_semantic_memory --skill npm-trusted-publishers
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: npm-trusted-publishers
Source: https://github.com/d-o-hub/chaotic_semantic_memory/tree/main/.agents/skills/npm-trusted-publishers
Command: npx skills add https://github.com/d-o-hub/chaotic_semantic_memory --skill npm-trusted-publishers

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

npm publish with OIDC trusted publishing can fail due to workflow filename mismatches, provenance errors, or misconfiguration. This skill provides pre-flight validation, error handling, and pragmatic troubleshooting guidance to quickly diagnose and fix trusted publishing issues in GitHub Actions.

Core Features & Use Cases

  • Pre-flight validation checks for Trusted Publisher configuration and workflow alignment.
  • Guidance for diagnosing E404 provenance-related failures and remediation steps.
  • End-to-end recovery and fallback strategies when OIDC-based publishing fails.

Quick Start

Confirm Trusted Publisher configuration and run a publish workflow to validate provenance and fix workflow filename mismatches.

Frequently Asked Questions about npm-trusted-publishers

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
Why does npm OIDC trusted publishing fail in GitHub Actions?

npm OIDC trusted publishing fails in GitHub Actions due to workflow filename mismatches, provenance errors, or environment misconfiguration. Pre-flight validation checks and remediation steps help diagnose and fix these trusted publishing failures.

How do I fix E404 provenance errors during npm publish?

Fix E404 provenance errors during npm publish by verifying Trusted Publisher configuration and workflow alignment. Diagnostic guidance and remediation steps resolve provenance-related failures in CI pipelines.

How do I validate npm trusted publisher configuration before running a publish workflow?

Validate npm trusted publisher configuration by running pre-flight checks to confirm workflow alignment and environment setup. Pre-flight validation ensures trusted publishing succeeds before running the publish workflow in CI.

What are the fallback strategies when OIDC-based npm publishing fails?

Fallback strategies for OIDC-based npm publishing failures include end-to-end recovery actions and workflow configuration checks. Documented recovery strategies and remediation steps restore trusted publishing success in CI pipelines.

Does npm trusted publishing require specific GitHub Actions environment configuration?

npm trusted publishing requires specific GitHub Actions environment configuration and workflow filename alignment. Pre-flight validation checks environment configuration and workflow mismatches to ensure OIDC trusted publishing succeeds.