ci

Author: rubenfiszel

.github/workflows/npm_on_release.yml

@@ -8,17 +8,21 @@ on:
 jobs:
   publish_typescript_client:
     runs-on: ubicloud-standard-8
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v3
         with:
           node-version: "20.x"
           registry-url: "https://registry.npmjs.org"
-      - run: cd typescript-client && ./publish.sh && cd ..
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+      - run: cd typescript-client && ./publish.sh --provenance --access public && cd ..
   publish_cli:
     runs-on: ubicloud-standard-8
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v3
@@ -28,6 +32,4 @@ jobs:
       - uses: oven-sh/setup-bun@v2
         with:
           bun-version: latest
-      - run: cd cli && ./build.sh && cd npm && npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+      - run: cd cli && ./build.sh && cd npm && npm publish --provenance --access public