diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 3a0e593..d8b31a1 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -11,10 +11,10 @@ jobs: name: Release runs-on: ubuntu-latest permissions: - contents: write # to be able to publish a GitHub release - issues: write # to be able to comment on released issues - pull-requests: write # to be able to comment on released pull requests - id-token: write # to enable use of OIDC for npm provenance + contents: write + issues: write + pull-requests: write + id-token: write steps: - name: Checkout uses: actions/checkout@v3 @@ -26,10 +26,8 @@ jobs: node-version: "lts/*" - name: Install dependencies run: npm i --package-lock-only && npm clean-install - # - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies - # run: npm audit signatures - name: Release env: - GITHUB_TOKEN: ${{ secrets.GH_TOKEN }} + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} NPM_TOKEN: ${{ secrets.NPM_TOKEN }} run: npx semantic-release