npm-trusted-publishers

Validate npm OIDC trusted publishing configuration in GitHub Actions workflows.

4|Updated Feb 15, 2026
One-click install
npx skills add https://github.com/d-o-hub/chaotic_semantic_memory --skill npm-trusted-publishers
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: npm-trusted-publishers
Source: https://github.com/d-o-hub/chaotic_semantic_memory/tree/main/.agents/skills/npm-trusted-publishers
Command: npx skills add https://github.com/d-o-hub/chaotic_semantic_memory --skill npm-trusted-publishers

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

npm publish with OIDC trusted publishing can fail due to workflow filename mismatches, provenance errors, or misconfiguration. This skill provides pre-flight validation, error handling, and pragmatic troubleshooting guidance to quickly diagnose and fix trusted publishing issues in GitHub Actions.

Core Features & Use Cases

  • Pre-flight validation checks for Trusted Publisher configuration and workflow alignment.
  • Guidance for diagnosing E404 provenance-related failures and remediation steps.
  • End-to-end recovery and fallback strategies when OIDC-based publishing fails.

Quick Start

Confirm Trusted Publisher configuration and run a publish workflow to validate provenance and fix workflow filename mismatches.

Frequently Asked Questions about npm-trusted-publishers

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
Why does npm OIDC trusted publishing fail in GitHub Actions?▼

npm OIDC trusted publishing fails in GitHub Actions due to workflow filename mismatches, provenance errors, or environment misconfiguration. Pre-flight validation checks and remediation steps help diagnose and fix these trusted publishing failures.

How do I fix E404 provenance errors during npm publish?▼

Fix E404 provenance errors during npm publish by verifying Trusted Publisher configuration and workflow alignment. Diagnostic guidance and remediation steps resolve provenance-related failures in CI pipelines.

How do I validate npm trusted publisher configuration before running a publish workflow?▼

Validate npm trusted publisher configuration by running pre-flight checks to confirm workflow alignment and environment setup. Pre-flight validation ensures trusted publishing succeeds before running the publish workflow in CI.

What are the fallback strategies when OIDC-based npm publishing fails?▼

Fallback strategies for OIDC-based npm publishing failures include end-to-end recovery actions and workflow configuration checks. Documented recovery strategies and remediation steps restore trusted publishing success in CI pipelines.

Does npm trusted publishing require specific GitHub Actions environment configuration?▼

npm trusted publishing requires specific GitHub Actions environment configuration and workflow filename alignment. Pre-flight validation checks environment configuration and workflow mismatches to ensure OIDC trusted publishing succeeds.