mu-ref/pdf-inspector
8
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

use npm trusted publisher (OIDC provenance) instead of NPM_TOKEN

Browse Source 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Abimael Martell
2026-04-02 12:08:04 -07:00
co-authored by Claude Opus 4.6
parent be032b0696
commit f1579fc0d1
1 changed files with 2 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/publish.yml
+2 -4
View File
@@ -6,7 +6,7 @@ on:
permissions: permissions:
contents: read contents: read
packages: write id-token: write
jobs: jobs:
build: build:
@@ -79,12 +79,10 @@ jobs:
- name: Collect binaries and publish - name: Collect binaries and publish
working-directory: napi working-directory: napi
run: | run: |
echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc
# Copy all .node binaries into the package directory # Copy all .node binaries into the package directory
cp artifacts/bindings-*/*.node . cp artifacts/bindings-*/*.node .
echo "=== Package contents ===" echo "=== Package contents ==="
ls -la *.node index.js index.d.ts ls -la *.node index.js index.d.ts
npm publish --access public npm publish --access public --provenance