Skip to content

Commit 21708cf

Browse files
committed
Use release-frontend-lib-trusted for npmjs trusted publisher
Alternative to passing the NODE_AUTH_TOKEN, but needs support from npmjs.com: https://docs.npmjs.com/trusted-publishers
1 parent f70914a commit 21708cf

File tree

1 file changed

+2
-6
lines changed

1 file changed

+2
-6
lines changed

.github/workflows/release.yml

Lines changed: 2 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -11,24 +11,20 @@ on:
1111
- major
1212
- minor
1313
- patch
14-
nodeAuthToken:
15-
description: NPM automation access token
16-
required: true
17-
type: string
1814

1915
permissions:
2016
contents: write
2117
# permission for npm error Provenance generation in GitHub Actions requires "write" access to the "id-token" permission
2218
# permission must be reset here otherwise we get the following error:
2319
# > The workflow is not valid. Error calling workflow. The workflow is requesting # 'id-token: write', but is only allowed 'id-token: none'.
20+
# Also needed to use npmjs "Trusted Publishers"
2421
id-token: write
2522

2623
jobs:
2724
run-release:
28-
uses: powsybl/github-ci/.github/workflows/release-frontend-lib-generic.yml@69b162754c0728d9aeb2ea568eaf47f28f60fafb
25+
uses: powsybl/github-ci/.github/workflows/release-frontend-lib-trusted-generic.yml@b75b81d572d19afa65c20fe0a867b5910e55be01
2926
with:
3027
versionType: ${{ github.event.inputs.versionType }}
31-
nodeAuthToken: ${{ github.event.inputs.nodeAuthToken }}
3228
githubappId: ${{ vars.GRIDSUITE_ACTIONS_APPID }}
3329
secrets:
3430
VERSIONBUMP_GHAPP_PRIVATE_KEY: ${{ secrets.VERSIONBUMP_GHAPP_PRIVATE_KEY }}

0 commit comments

Comments
 (0)