fix: publish permissions

https://docs.github.com/en/actions/use-cases-and-examples/publishing-packages/publishing-nodejs-packages#authenticating-to-the-destination-repository
curvefi · Feb 5, 2025 · eafa9af · eafa9af
1 parent 1842342
commit eafa9af
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -21,6 +21,7 @@ jobs:
       uses: actions/setup-node@v4
       with:
         node-version: ${{ matrix.node-version }}
+        cache: npm
 
     - name: Checkout repository
       uses: actions/checkout@v4

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -38,12 +38,16 @@ jobs:
 
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v4
-      - name: Setup .npmrc file to publish to npm
+      - name: Setup node
         uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: '22'
+          cache: npm
       - name: Install modules
         run: npm ci
       - name: Build