Software Supply Chain
Trusted Publishing
Also: OIDC publishing, tokenless publishing
A registry feature that accepts a release from a specific CI workflow, proven by a short-lived identity, instead of from a long-lived token.
In more detail
It removes the stored publish token that thieves like to steal. The trade-off is that the workflow itself becomes the key: whoever can change the workflow file, or run it, can publish. A release made through trusted publishing proves where it was built, not that the build was honest.