Identify and list all OIDC trusted publishing actions

[dave2wave]

It would be useful to keep a list of all approved OIDC/Trusted publishing GH actions.

[kevinjqliu]

maybe a search on the id-token: write permission can be helpful here

heres an example from pyiceberg https://github.com/apache/iceberg-python/blob/2dadcdf7566f8466ffe0f2bcb2569bbaa9c3c433/.github/workflows/nightly-pypi-build.yml#L78

[dave2wave]

Also looking for the publishing action:

from your example: https://github.com/apache/iceberg-python/blob/2dadcdf7566f8466ffe0f2bcb2569bbaa9c3c433/.github/workflows/nightly-pypi-build.yml#L91