From 1d8a9dff3431462ccb7724bfd23a8f7dcd23e051 Mon Sep 17 00:00:00 2001
From: Dustin Spicuzza <dustin@virtualroadside.com>
Date: Mon, 23 Oct 2023 04:00:32 -0400
Subject: [PATCH] Give more information to users

Reusable workflows don't work, and it's challenging to know that. Help the user out.
---
 README.md        | 3 +++
 oidc-exchange.py | 3 +++
 2 files changed, 6 insertions(+)

diff --git a/README.md b/README.md
index eb88d936..a0d208e6 100644
--- a/README.md
+++ b/README.md
@@ -25,6 +25,9 @@ tag, or opt-in to [use a full Git commit SHA] and Dependabot.
 
 ### Trusted publishing
 
+> [!NOTE] Trusted publishing does not support reusable workflows at this time,
+> please use a username/token instead.
+
 > [!NOTE]
 > Trusted publishing is sometimes referred to by its
 > underlying technology -- OpenID Connect, or OIDC for short.
diff --git a/oidc-exchange.py b/oidc-exchange.py
index fb1df00d..0ac8f8b7 100644
--- a/oidc-exchange.py
+++ b/oidc-exchange.py
@@ -71,6 +71,9 @@
 * `repository_owner_id`: `{repository_owner_id}`
 * `job_workflow_ref`: `{job_workflow_ref}`
 * `ref`: `{ref}`
+
+See https://docs.pypi.org/trusted-publishers/troubleshooting/ for more help
+
 """
 
 # Rendered if the package index's token response isn't valid JSON.