Skip to content

Commit 502beb0

Browse files
committed
chore: use trusted publishing
1 parent f5132bd commit 502beb0

File tree

1 file changed

+6
-17
lines changed

1 file changed

+6
-17
lines changed

.github/workflows/cd.yml

Lines changed: 6 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -15,27 +15,17 @@ jobs:
1515
environment: upload
1616

1717
permissions:
18-
id-token: write # Required by Akeyless
19-
contents: write
20-
packages: read
18+
id-token: write # Required by Akeyless
19+
contents: write # Allows semantic-release to create tags
20+
issues: write # Allows semantic-release to comment on issues
21+
pull-requests: write # Allows semantic-release to comment on PRs
22+
packages: read
2123

2224
steps:
2325
- uses: actions/setup-node@v6
2426
with:
2527
node-version: '24'
2628

27-
- name: Import Secrets
28-
id: import-secrets
29-
uses: LanceMcCarthy/akeyless-action@v5
30-
with:
31-
access-id: ${{ secrets.GH_AKEYLESS_ACCESS_ID }}
32-
static-secrets: |
33-
{
34-
"/WebComponents/prod/tokens/GH_TOKEN": "GH_TOKEN",
35-
"/WebComponents/prod/tokens/PROGRESS_NPM_REGISTRY_TOKEN": "NPM_TOKEN"
36-
}
37-
export-secrets-to-environment: false
38-
3929
- name: Check out branch
4030
uses: actions/checkout@v6
4131
with:
@@ -51,5 +41,4 @@ jobs:
5141
- name: Publish release
5242
run: npx --ignore-scripts [email protected]
5343
env:
54-
NPM_TOKEN: ${{ steps.import-secrets.outputs.NPM_TOKEN }}
55-
GH_TOKEN: ${{ steps.import-secrets.outputs.GH_TOKEN }}
44+
GH_TOKEN: ${{ github.token }}

0 commit comments

Comments
 (0)