Browse Source

chore: Update publish workflow to use trusted publishing

Michael Bromley 2 months ago
parent
commit
9e3940bb30
1 changed files with 7 additions and 10 deletions
  1. 7 10
      .github/workflows/publish_to_npm.yml

+ 7 - 10
.github/workflows/publish_to_npm.yml

@@ -3,24 +3,21 @@ on:
   release:
     types: [published]
   workflow_dispatch:
-    
+
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
-  build:
+  publish:
     runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      id-token: write
     steps:
       - uses: actions/checkout@v4
-      # Setup .npmrc file to publish to npm
       - uses: actions/setup-node@v4
         with:
           node-version: '22.x'
           registry-url: 'https://registry.npmjs.org'
-      # Install  dependencies without modifying package-lock.json file
+      # Install dependencies without modifying package-lock.json file
       - run: npm install --no-save
       - run: npm run build
       - run: lerna publish from-package --yes
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-          NPM_CONFIG_PROVENANCE: true