Fix missing token in workflow checkout step (#41)

Author: RicardoASJunior

.github/workflows/main.yml

@@ -2,18 +2,15 @@ name: CI
 
 on:
   push:
-    branches:
-      - master
+    branches: [ master ]
     paths-ignore:
       - ".vscode/**"
       - ".github/**"
       - "**/*.md"
   pull_request:
-    branches:
-      - master
+    branches: [ master ]
   release:
-    types:
-      - released
+    types: [ published ]
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.base_ref || github.run_id }}
@@ -23,20 +20,9 @@ jobs:
   build:
     timeout-minutes: 10
     runs-on: ubuntu-latest
-    outputs:
-      taggedbranch: ${{ steps.find-branch.outputs.taggedbranch }}
     steps:
       - uses: actions/checkout@v4
       - run: git fetch --depth=1 origin +refs/tags/*:refs/tags/*
-      - name: Find which branch the release tag points at
-        id: find-branch
-        if: github.event_name == 'release'
-        shell: bash
-        run: |
-          git fetch --depth=1 origin +refs/heads/*:refs/heads/*
-          set -x
-          TAGGEDBRANCH=$(git for-each-ref --points-at=${{github.sha}} --format='%(refname:lstrip=2)' refs/heads/)
-          echo "taggedbranch=$TAGGEDBRANCH" >> $GITHUB_OUTPUT
       - name: Set an output
         id: set-version
         run: |
@@ -57,32 +43,37 @@ jobs:
           mkdir dist
           echo $VERSION > meta.version
           echo $NAME > meta.name
+
       - name: Use Node.js
         uses: actions/setup-node@v4
         with:
           node-version: 20
+
       - run: npm install
       - name: lint
         run: npm run lint
       - run: npm run compile
       - name: npm test
         run: xvfb-run npm test
+
       - name: Build package
-        run: |
-          npx vsce package -o ${{ steps.set-version.outputs.name }}.vsix
+        run: npx vsce package -o ${{ steps.set-version.outputs.name }}.vsix
+
       - uses: actions/upload-artifact@v4
         if: github.event_name != 'release'
         with:
           name: ${{ steps.set-version.outputs.name }}.vsix
           path: ${{ steps.set-version.outputs.name }}.vsix
+
       - uses: actions/upload-artifact@v4
         with:
           name: meta
           path: |
             meta.name
             meta.version
+
   beta:
-    if: (github.event_name == 'push')
+    if: github.event_name == 'push'
     runs-on: ubuntu-latest
     needs: build
     steps:
@@ -94,42 +85,48 @@ jobs:
         id: set-version
         run: |
           set -x
-          echo "version=`cat meta.version`" >> $GITHUB_OUTPUT
-          echo "name=`cat meta.name`" >> $GITHUB_OUTPUT
+          echo "version=$(cat meta.version)" >> $GITHUB_OUTPUT
+          echo "name=$(cat meta.name)" >> $GITHUB_OUTPUT
       - uses: actions/download-artifact@v4
         with:
           name: ${{ steps.set-version.outputs.name }}.vsix
       - name: Create Release
-        id: create-release
         uses: softprops/action-gh-release@v1
         with:
           tag_name: v${{ steps.set-version.outputs.version }}
-          prerelease: ${{ github.event_name != 'release' }}
+          prerelease: true
           files: ${{ steps.set-version.outputs.name }}.vsix
           token: ${{ secrets.GITHUB_TOKEN }}
+
   publish:
     needs: build
-    if: github.event_name == 'release' && needs.build.outputs.taggedbranch == 'master'
+    if: github.event_name == 'release' && github.event.release.target_commitish == 'master'
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v4
         with:
           ref: master
-          token: ${{ secrets.TOKEN }}
+          fetch-depth: 0
+          token: ${{ secrets.GITHUB_TOKEN }}
+
       - uses: actions/download-artifact@v4
         with:
           name: meta
           path: .
+
       - name: Use Node.js
         uses: actions/setup-node@v4
         with:
           node-version: 20
+
       - name: Prepare build
         id: set-version
         run: |
-          VERSION=`cat meta.version`
-          NEXT_VERSION=`cat meta.version | awk -F. '/[0-9]+\./{$NF++;print}' OFS=.`
-          echo "name=`cat meta.name`" >> $GITHUB_OUTPUT
+          VERSION=$(cat meta.version)
+          NEXT_VERSION=$(cat meta.version | awk -F. '/[0-9]+\./{$NF++;print}' OFS=.)
+          echo "name=$(cat meta.name)" >> $GITHUB_OUTPUT
           tmp=$(mktemp)
           git config --global user.name 'ProjectBot'
           git config --global user.email '[email protected]'
@@ -140,22 +137,24 @@ jobs:
           npm install
           jq 'del(.enableProposedApi,.enabledApiProposals)' package.json > "$tmp" && mv "$tmp" package.json
           git push
+
       - name: Build package
-        run: |
-          npx vsce package -o ${{ steps.set-version.outputs.name }}.vsix
+        run: npx vsce package -o ${{ steps.set-version.outputs.name }}.vsix
+
       - name: Upload Release Asset
-        id: upload-release-asset
         uses: softprops/action-gh-release@v1
         with:
           tag_name: ${{ github.event.release.tag_name }}
           files: ${{ steps.set-version.outputs.name }}.vsix
           token: ${{ secrets.GITHUB_TOKEN }}
+
       - name: Publish to VSCode Marketplace
         run: |
           [ -n "${{ secrets.VSCE_TOKEN }}" ] && \
-            npx vsce publish --packagePath ${{ steps.set-version.outputs.name }}.vsix -p ${{ secrets.VSCE_TOKEN }} || true
+          npx vsce publish --packagePath ${{ steps.set-version.outputs.name }}.vsix -p ${{ secrets.VSCE_TOKEN }} || true
+
       - name: Publish to Open VSX Registry
         timeout-minutes: 5
         run: |
           [ -n "${{ secrets.OVSX_TOKEN }}" ] && \
-            npx ovsx publish ${{ steps.set-version.outputs.name }}.vsix --pat ${{ secrets.OVSX_TOKEN }} || true
+          npx ovsx publish ${{ steps.set-version.outputs.name }}.vsix --pat ${{ secrets.OVSX_TOKEN }} || true