Make it possible to enforce publishing only through trusted publishing for crates

Author: Kobzol

docs/toml-schema.md

@@ -456,6 +456,9 @@ crates = ["regex"]
 workflow-filename = "ci.yml"
 # GitHub Actions environment that has to be used for the publishing (required)
 environment = "deploy"
+# Disable other mechanisms for publishing this set of crates (optional, default is false)
+# If set to `true`, the crates will only be publishable through trusted publishing
+disable-other-publish-methods = false
 ```
 
 > [!TIP]

rust_team_data/src/v1.rs

@@ -188,6 +188,7 @@ pub struct Repo {
 pub struct Crate {
     pub name: String,
     pub crates_io_publishing: Option<CratesIoPublishing>,
+    pub trusted_publishing_only: bool,
 }
 
 #[derive(Debug, Clone, Deserialize, Serialize, PartialEq)]

src/schema.rs

@@ -880,6 +880,8 @@ pub(crate) struct CratesIoPublishing {
     pub crates: Vec<String>,
     pub workflow_filename: String,
     pub environment: String,
+    #[serde(default)]
+    pub disable_other_publish_methods: bool,
 }
 
 #[derive(serde_derive::Deserialize, Debug, Clone)]

src/static_api.rs

@@ -157,6 +157,7 @@ impl<'a> Generator<'a> {
                                 workflow_file: p.workflow_filename.clone(),
                                 environment: p.environment.clone(),
                             }),
+                            trusted_publishing_only: p.disable_other_publish_methods,
                         })
                     })
                     .collect(),

tests/static-api/_expected/v1/repos.json

@@ -71,14 +71,16 @@
           "crates_io_publishing": {
             "workflow_file": "ci.yml",
             "environment": "deploy"
-          }
+          },
+          "trusted_publishing_only": false
         },
         {
           "name": "my-crate-2",
           "crates_io_publishing": {
             "workflow_file": "ci.yml",
             "environment": "deploy"
-          }
+          },
+          "trusted_publishing_only": false
         }
       ],
       "environments": [],

tests/static-api/_expected/v1/repos/some_repo.json

@@ -39,14 +39,16 @@
       "crates_io_publishing": {
         "workflow_file": "ci.yml",
         "environment": "deploy"
-      }
+      },
+      "trusted_publishing_only": false
     },
     {
       "name": "my-crate-2",
       "crates_io_publishing": {
         "workflow_file": "ci.yml",
         "environment": "deploy"
-      }
+      },
+      "trusted_publishing_only": false
     }
   ],
   "environments": [],