Skip to content

Commit b0575ea

Browse files
authored
Update release workflow with OIDC permissions
Added permissions for OIDC and updated job steps.
1 parent eed37d0 commit b0575ea

File tree

1 file changed

+4
-8
lines changed

1 file changed

+4
-8
lines changed

.github/workflows/release-js-package.yml

Lines changed: 4 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,10 @@ on:
88
- "packages/sdk/**" # Trigger only changes in packages
99
- ".github/workflows/release-js-package.yml"
1010

11+
permissions:
12+
id-token: write # Required for OIDC
13+
contents: read
14+
1115
concurrency: ${{ github.workflow }}-${{ github.ref }}
1216

1317
jobs:
@@ -31,13 +35,5 @@ jobs:
3135
- name: Install dependencies
3236
run: pnpm install --frozen-lockfile
3337

34-
- name: Create .npmrc file
35-
run: echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > .npmrc
36-
env:
37-
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
38-
3938
- name: Publish
4039
run: pnpm publish-sdk
41-
env:
42-
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
43-
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}

0 commit comments

Comments
 (0)