NPM_TOKEN no longer lives on github. only aws auth is required for CI

3p3r · Feb 25, 2022 · f8f7566 · f8f7566
1 parent dd9624c
commit f8f7566
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -36,6 +36,12 @@ jobs:
           role-session-name: github-actions-cdk-web
           aws-region: us-east-1
 
+      - name: setup npm
+        run: |
+          export NODE_AUTH_TOKEN=$(aws --output json ssm get-parameter --name /github-actions/npm-token | jq -r ".Parameter.Value")
+          echo "NODE_AUTH_TOKEN=$NODE_AUTH_TOKEN" >> $GITHUB_ENV
+          echo "::add-mask::$NODE_AUTH_TOKEN"
+
       - name: installing dependencies
         run: npm install
 
@@ -54,8 +60,6 @@ jobs:
       - name: releasing on NPM (cdk-web - with dependencies)
         if: ${{ !env.ACT && github.ref == 'refs/heads/main' && github.event_name == 'push' }}
         run: npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: releasing on NPM (aws-cdk-web - without dependencies)
         if: ${{ !env.ACT && github.ref == 'refs/heads/main' && github.event_name == 'push' }}
@@ -75,8 +79,6 @@ jobs:
             npm publish
           popd
           rm -rf aws-cdk-web
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: tagging a new release on Git
         if: ${{ !env.ACT && github.ref == 'refs/heads/main' && github.event_name == 'push' }}