Filip/matrix-spec
1
0
Fork 0
mirror of https://github.com/matrix-org/matrix-spec synced 2026-03-13 06:54:10 +01:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Use NPM Trusted Publishers over token

Browse source 
due to security changes being enacted next month by npm
This commit is contained in:
Michael Telatynski 2025-10-29 10:38:48 +00:00
parent 9d063c8d2d
commit e4ab0cd9c8
No known key found for this signature in database
GPG key ID: A2B008A5F49F5D0D
1 changed files with 4 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
.github/workflows/release.yaml vendored
View file

@ -12,6 +12,9 @@ jobs:
defaults: defaults:
run: run:
working-directory: packages/npm working-directory: packages/npm
permissions:
contents: read
id-token: write
steps: steps:
- name: 🧮 Checkout code - name: 🧮 Checkout code
uses: actions/checkout@v4 uses: actions/checkout@v4
@ -33,10 +36,4 @@ jobs:
VERSION: ${{ github.event.release.tag_name }}.0 VERSION: ${{ github.event.release.tag_name }}.0
- name: 🚀 Publish to npm - name: 🚀 Publish to npm
id: npm-publish run: npm publish --provenance --access public --tag latest
uses: JS-DevTools/npm-publish@19c28f1ef146469e409470805ea4279d47c3d35c # v3.1.1
with:
token: ${{ secrets.NPM_TOKEN }}
package: packages/npm
access: public
ignore-scripts: false