-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Description
Issue
The jlpm steps in the CI workflow are currently using GITHUB_TOKEN for authentication, but jlpm/Yarn/NPM expects NODE_AUTH_TOKEN (or YARN_NPM_AUTH_TOKEN) for registry authentication.
Problem
When packages require GitHub Packages/NPM authentication, the install and audit steps will fail because GITHUB_TOKEN is not recognized by the npm registry authentication system.
Solution
Replace GITHUB_TOKEN with NODE_AUTH_TOKEN in the environment variables for the jlpm steps in .github/workflows/ci.yml:
Lines to fix:
- Lines 52-59 (audit-prod job, jlpm install and audit steps)
- Lines 76-83 (audit-all job, jlpm install and audit steps)
Change:
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}To:
env:
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}Context
- Related PR: feat: add yarn audit checks to CI workflow #10
- Comment: feat: add yarn audit checks to CI workflow #10 (comment)
- Requested by: @jamesbhobbs
Metadata
Metadata
Assignees
Labels
No labels