fix(ci): use OIDC for npm publish instead of token auth (#10619)

* fix(ci): use OIDC for npm publish instead of token auth

* Change permissions from write to read for contents

---------

Co-authored-by: Jay <jasonsaayman@gmail.com>
This commit is contained in:
Shaan Majid 2026-04-01 13:50:33 +00:00 committed by GitHub
parent a5881813d3
commit ebf3036932
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -6,7 +6,7 @@ on:
- 'v1.*.*'
permissions:
contents: write
contents: read
id-token: write
jobs:
@ -27,5 +27,3 @@ jobs:
run: npm run build
- name: Publish to NPM
run: npm publish --provenance --access public
env:
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}