Added Trusted publishing for npm

viktor-podzigun · viktor-podzigun · commit e2fab54ec7a4 · 2025-11-08T15:39:02.000+01:00
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -10,6 +10,10 @@ on:
   pull_request:
     branches: [main]
 
+permissions:
+  id-token: write # Required for OIDC
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -24,6 +28,7 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: "24"
+          registry-url: "https://registry.npmjs.org"
 
       - name: Cache node_modules
         uses: actions/cache@v4
@@ -65,11 +70,8 @@ jobs:
 
       - name: Publish RELEASE
         run: |
-          echo "//registry.npmjs.org/:_authToken=\${NPM_TOKEN}" > .npmrc
           VERSION="$(echo "$TAG_NAME" | cut -d'v' -f 2)"
           echo "Publish a release version=$VERSION for tag $TAG_NAME"
           npm --no-git-tag-version --allow-same-version version $VERSION
           npm publish
         if: ${{ env.TAG_NAME != '' }}
-        env:
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
