Skip to content

Commit a5bd593

Browse files
authored
ci: Update staging-step-1.yml to support OIDC publishing (#1132)
1 parent cf5ed79 commit a5bd593

File tree

1 file changed

+9
-1
lines changed

1 file changed

+9
-1
lines changed

.github/workflows/staging-step-1.yml

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -253,13 +253,20 @@ jobs:
253253
runs-on: ubuntu-latest
254254
needs:
255255
- create-release-branch
256+
257+
# OIDC permissions for npm trusted publishing
258+
permissions:
259+
contents: write
260+
issues: write
261+
pull-requests: write
262+
id-token: write
263+
256264
env:
257265
GITHUB_TOKEN: ${{ secrets.MP_SEMANTIC_RELEASE_BOT }}
258266
GIT_AUTHOR_NAME: mparticle-automation
259267
GIT_AUTHOR_EMAIL: [email protected]
260268
GIT_COMMITTER_NAME: mparticle-automation
261269
GIT_COMMITTER_EMAIL: [email protected]
262-
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
263270

264271
steps:
265272
- name: Checkout staging branch
@@ -284,6 +291,7 @@ jobs:
284291
uses: actions/setup-node@v3
285292
with:
286293
node-version: 24.x
294+
registry-url: 'https://registry.npmjs.org'
287295

288296
- name: Install dependencies
289297
run: npm ci

0 commit comments

Comments
 (0)