Skip to content

Commit d0aebce

Browse files
authored
fix: migrate npm authentication from token to OIDC (#327)
- remove NPM_TOKEN and NODE_AUTH_TOKEN secrets from release workflow as authentication is now handled via OpenID Connect (OIDC) with provenance support.
1 parent 7330d8c commit d0aebce

1 file changed

Lines changed: 1 addition & 3 deletions

File tree

.github/workflows/release.yml

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
uses: actions/setup-node@v5
2727
with:
2828
node-version: 20
29-
cache: "npm"
29+
cache: 'npm'
3030

3131
- name: Install
3232
run: npm install
@@ -38,8 +38,6 @@ jobs:
3838
run: npx semantic-release
3939
env:
4040
GITHUB_TOKEN: ${{ secrets.CUSTOM_GITHUB_TOKEN }}
41-
NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
42-
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
4341

4442
sync-stage:
4543
needs: release

0 commit comments

Comments
 (0)