---
title: "GHSA-5xjx-3w67-w9x9: pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI"
url: https://erroneo.us/security/ghsa/GHSA-5xjx-3w67-w9x9/
description: "GHSA-5xjx-3w67-w9x9 (critical, GitHub Actions): pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital…"
type: advisory
section: "Security Digest"
date_published: 2026-10-30
date_modified: 2026-10-30
publisher: erroneo.us
author: erroneo.us Security Desk
ghsa: "GHSA-5xjx-3w67-w9x9"
license: All rights reserved. Quote with attribution and a link.
---

# GHSA-5xjx-3w67-w9x9: pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI

## Affected packages

- GitHub Actions `pypa/gh-action-pypi-publish` <= 1.14.2 → fixed: 1.14.3

## Details

Summary The [pypi-publish action][pypi-publish] versions before 1.14.2 used to bundle the emSign root CA trust store certificate through the certifi distribution. It has since been removed through the bundle and the new version no longer includes them. [pypi-publish]: https://github.com/marketplace/actions/pypi-publish Details The certifi-provided TLS trust store is typically used by many projects in the Python ecosystem, including Sigstore that [pypi-publish] relies on for Trusted Publishing and Digital Attestations. Related The external compromise is being tracked at https://emudhra.we-have-a-problem.com

## Sources

- [GitHub Advisory GHSA-5xjx-3w67-w9x9](https://github.com/advisories/GHSA-5xjx-3w67-w9x9)
- [github.com](https://github.com/pypa/gh-action-pypi-publish/security/advisories/GHSA-5xjx-3w67-w9x9)

---
Source page: https://erroneo.us/security/ghsa/GHSA-5xjx-3w67-w9x9/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt