Skip to content

Commit

Permalink
Merge pull request #29 from patrickcate/develop
Browse files Browse the repository at this point in the history
ci: update release github action permissions
  • Loading branch information
patrickcate authored Apr 20, 2024
2 parents 37d8a7a + 1e7424c commit 7df0817
Showing 1 changed file with 12 additions and 0 deletions.
12 changes: 12 additions & 0 deletions .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -8,16 +8,25 @@ on:
- alpha
- beta

permissions:
contents: read

jobs:
release:
if: contains(github.event.head_commit.message, 'skip release') == false
runs-on: ubuntu-latest
permissions:
contents: write # to be able to publish a GitHub release
issues: write # to be able to comment on released issues
pull-requests: write # to be able to comment on released pull requests
id-token: write # to enable use of OIDC for npm provenance
steps:
- name: Checkout
uses: actions/checkout@v4
with:
fetch-depth: 0
token: ${{ secrets.SEMANTIC_RELEASE_GH_TOKEN }}
persist-credentials: false

- name: Setup Node.js
uses: actions/setup-node@v4
Expand All @@ -27,6 +36,9 @@ jobs:
- name: Install dependencies
run: npm ci

- name: Verify the integrity of installed dependencies
run: npm audit signatures

- name: Release
env:
GITHUB_TOKEN: ${{ secrets.SEMANTIC_RELEASE_GH_TOKEN }}
Expand Down

0 comments on commit 7df0817

Please sign in to comment.