Skip to content

Commit b432386

Browse files
committed
Update GitHub Actions for enhanced publishing workflow
- Update GitHub workflow to enhance permissions for content access and ID token writing. - Modify the publish command to improve provenance tracking in the deployment process. Signed-off-by: katsumata <12413150+winor30@users.noreply.github.com>
1 parent 65651c1 commit b432386

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

.github/workflows/publish.yml

+5-1
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,10 @@ jobs:
88
publish:
99
runs-on: ubuntu-latest
1010

11+
permissions:
12+
contents: read
13+
id-token: write
14+
1115
steps:
1216
- name: Checkout
1317
uses: actions/checkout@v4
@@ -28,6 +32,6 @@ jobs:
2832
run: pnpm run build
2933

3034
- name: Publish
31-
run: pnpm publish --access public --no-git-checks
35+
run: pnpm publish --provenance --access public --no-git-checks
3236
env:
3337
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

0 commit comments

Comments
 (0)