Skip to content

Commit ae1102b

Browse files
kmelveclaude
andcommitted
fix(ci): configure workflow for pure OIDC publishing
Remove registry-url from setup-node to avoid expecting NODE_AUTH_TOKEN. Pure OIDC publishing uses GitHub's id-token for authentication when Trusted Publishing is configured on npm. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
1 parent af3e572 commit ae1102b

File tree

1 file changed

+1
-2
lines changed

1 file changed

+1
-2
lines changed

.github/workflows/release.yml

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,6 @@ jobs:
3030
with:
3131
node-version: '22'
3232
cache: 'pnpm'
33-
registry-url: 'https://registry.npmjs.org'
3433

3534
- name: Install dependencies
3635
run: pnpm install --frozen-lockfile
@@ -52,7 +51,7 @@ jobs:
5251
echo "exists=false" >> $GITHUB_OUTPUT
5352
fi
5453
55-
- name: Publish to npm
54+
- name: Publish to npm with provenance (OIDC)
5655
if: steps.check.outputs.exists == 'false'
5756
run: npm publish --provenance --access public
5857

0 commit comments

Comments
 (0)