Merge pull request #198 from secvisogram/fix-npm-publish

chore: use latest npm version while publishing

Author: domachine

.github/workflows/npm-publish.yml

@@ -8,6 +8,7 @@ on:
     types: [created]
 
 permissions:
+  id-token: write
   contents: read
   actions: read
 
@@ -35,9 +36,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 24
           registry-url: https://registry.npmjs.org/
       - run: npm ci
       - run: npm publish
-        env:
-          NPM_TOKEN: ${{secrets.npm_token}}

.npmrc

@@ -23,6 +23,9 @@
     "csaf-validator-service",
     "secvisogram"
   ],
+  "repository": {
+    "url": "https://github.com/secvisogram/csaf-validator-service"
+  },
   "publishConfig": {
     "access": "public"
   },