Skip to content

Commit c679f7d

Browse files
committed
use the oidc for publishing
1 parent bbb25ea commit c679f7d

File tree

1 file changed

+8
-6
lines changed

1 file changed

+8
-6
lines changed

.github/workflows/on_release_create.yml

Lines changed: 8 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -3,12 +3,16 @@ on:
33
release:
44
types: [created]
55

6+
permissions:
7+
id-token: write # Required for OIDC
8+
contents: read
9+
610
jobs:
711
release-check:
812
runs-on: ubuntu-latest
913
steps:
10-
- uses: actions/checkout@v3
11-
- uses: actions/setup-node@v3
14+
- uses: actions/checkout@v4
15+
- uses: actions/setup-node@v4
1216
with:
1317
node-version: '18.x'
1418
registry-url: 'https://registry.npmjs.org'
@@ -27,11 +31,11 @@ jobs:
2731

2832
steps:
2933
- name: checkout repository
30-
uses: actions/checkout@v3
34+
uses: actions/checkout@v4
3135
with:
3236
fetch-depth: 0
3337

34-
- uses: actions/setup-node@v3
38+
- uses: actions/setup-node@v4
3539
with:
3640
node-version: '18.x'
3741
registry-url: 'https://registry.npmjs.org'
@@ -84,5 +88,3 @@ jobs:
8488

8589
- name: Publish to npmjs
8690
run: npm publish --access public
87-
env:
88-
NODE_AUTH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}

0 commit comments

Comments
 (0)