-
Notifications
You must be signed in to change notification settings - Fork 57
ci: oidc #282
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ci: oidc #282
Conversation
|
Size Change: 0 B Total Size: 65.5 kB ℹ️ View Unchanged
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
This PR updates the CI deployment workflow to use OpenID Connect (OIDC) authentication instead of secret-based NPM authentication and adds an explicit npm update step.
- Added explicit npm version update to ensure consistent npm version across builds
- Removed secret-based NPM token authentication in favor of OIDC
- Simplified the package publishing step by removing manual token configuration
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
| run: | | ||
| echo "npmAuthToken: \${NPM_TOKEN}" >> .yarnrc.yml | ||
| yarn npm publish | ||
| run: yarn npm publish |
Copilot
AI
Oct 13, 2025
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The NPM_TOKEN secret has been removed but no OIDC configuration is visible in this diff. Ensure that proper OIDC authentication is configured elsewhere in the workflow (e.g., permissions section or configure-aws-credentials action) to authenticate with the npm registry.
No description provided.