-
Notifications
You must be signed in to change notification settings - Fork 57
ci: oidc 3 #285
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ci: oidc 3 #285
Conversation
|
Size Change: 0 B Total Size: 65.5 kB ℹ️ View Unchanged
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
Enable OIDC/npm provenance on package publish and change the Git author used for tagging in the release workflow.
- Add npm provenance and public access flags to the publish step.
- Update git user.name and user.email used by the workflow before tagging.
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
| git config user.name "김윤호 yunho" | ||
| git config user.email "kimyouknow9@gmail.com" |
Copilot
AI
Oct 15, 2025
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Avoid hard-coding a personal name/email in CI. It exposes personal information in build logs/artifacts and causes tags/commits to be authored under a human identity. Prefer using the GitHub Actions bot identity or derive from the workflow actor with a noreply address. For example:
git config user.name "github-actions[bot]"
git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
or:
git config user.name "${{ github.actor }}"
git config user.email "${{ github.actor }}@users.noreply.github.com"
| git config user.name "김윤호 yunho" | |
| git config user.email "kimyouknow9@gmail.com" | |
| git config user.name "github-actions[bot]" | |
| git config user.email "41898282+github-actions[bot]@users.noreply.github.com" |
No description provided.