Trusted Publishing - RubyGems Guides

With Trusted Publishing, releasing a new version of your gem is as simple as pushing a git tag to GitHub. There are no API tokens to create, rotate, or store as secrets — GitHub Actions securely authenticates with RubyGems.org on your behalf using short-lived tokens. Under the hood, Trusted Publishing uses OpenID Connect (OIDC) to exchange short-lived identity tokens between GitHub Actions and RubyGems.org. Once configured, you never need to touch credentials again. Adding a trusted publisher to an existing gem Releasing gems with a trusted publisher Pushing a new gem with a trusted publisher Using reusable workflows How it works Further reading .