Skip to content

Commit c2ca1e7

Browse files
authored
Add npm trusted publishing support (#45)
* Add npm trusted publishing support - Add id-token, contents, and pull-requests write permissions to release job - Add npm update step to ensure latest npm version for provenance support - Add --provenance flag for npm publish - Add changeset for all packages - Enables automated publishing via OIDC without requiring OTP * Remove --provenance
1 parent df4690f commit c2ca1e7

File tree

2 files changed

+14
-0
lines changed

2 files changed

+14
-0
lines changed
Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
"@awesome-code-style/eslint-config": patch
3+
"@awesome-code-style/prettier-config": patch
4+
"@awesome-code-style/stylelint-config": patch
5+
---
6+
7+
Add npm trusted publishing support for automated releases via OIDC

.github/workflows/release.yml

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,10 @@ jobs:
1515
if: github.repository == 'implydata/awesome-code-style'
1616
name: Release
1717
runs-on: ubuntu-latest
18+
permissions:
19+
id-token: write
20+
contents: write
21+
pull-requests: write
1822

1923
steps:
2024
- uses: actions/checkout@v3
@@ -29,6 +33,9 @@ jobs:
2933

3034
- run: npm install --prefer-offline --no-audit
3135

36+
- name: Update npm
37+
run: npm install -g npm@latest
38+
3239
- name: Create Release Pull Request or Publish to npm
3340
id: changesets
3441
uses: changesets/action@v1

0 commit comments

Comments
 (0)