We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 15bade5 commit 1e0991aCopy full SHA for 1e0991a
2 files changed
.github/workflows/publish-npm.yml
@@ -4,7 +4,8 @@ on:
4
types: [created]
5
6
permissions:
7
- contents: write # we need to read secrets
+ contents: read # we need to read secrets
8
+ id-token: write
9
10
jobs:
11
build:
@@ -17,6 +18,6 @@ jobs:
17
18
with:
19
registry-url: 'https://registry.npmjs.org'
20
- name: Publish package on NPM 📦
- run: npm publish
21
+ run: npm publish --access public
22
env:
23
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
.npmrc
@@ -1,3 +1,3 @@
1
-@staffbase:registry=https://registry.npmjs.org/
+//registry.npmjs.org/:_authToken=${NODE_AUTH_TOKEN}
2
+registry=https://registry.npmjs.org/
3
always-auth=true
-//registry.npmjs.org/:_authToken=${NPM_TOKEN}
0 commit comments