Add the NPM token to the workflows.

Author: Artmann

.github/workflows/ci.yml

@@ -30,11 +30,14 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v5
         with:
-          node-version: ${{ env.NODE_VERSION }}
           cache: 'npm'
+          node-version: ${{ env.NODE_VERSION }}
+          registry-url: 'https://npm.pkg.github.com'
 
       - name: Install dependencies
         run: npm ci --prefer-offline --no-audit
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Run ESLint
         run: npm run lint

.github/workflows/copilot-setup-steps.yml

@@ -42,6 +42,7 @@ jobs:
         uses: actions/setup-node@v5
         with:
           node-version: ${{env.NODE_VERSION}}
+          registry-url: 'https://npm.pkg.github.com'
 
       - name: Cache npm files
         uses: actions/cache@v4
@@ -59,6 +60,8 @@ jobs:
       # Let that happen in other jobs, this job needs to be fast
       - name: npm ci
         run: npm ci --ignore-scripts --prefer-offline --no-audit
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: npm run postinstall
         run: npm run postinstall

.github/workflows/deps.yml

@@ -28,11 +28,14 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v5
         with:
-          node-version: ${{ env.NODE_VERSION }}
           cache: 'npm'
+          node-version: ${{ env.NODE_VERSION }}
+          registry-url: 'https://npm.pkg.github.com'
 
       - name: Install dependencies
         run: npm ci --prefer-offline --no-audit
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Run security audit
         run: npm audit --json > audit-report.json || true