release.yml 1.0 KB

123456789101112131415161718192021222324252627282930313233343536
  1. name: Release
  2. on:
  3. push:
  4. branches:
  5. - main # or main
  6. permissions:
  7. contents: read # for checkout
  8. jobs:
  9. release:
  10. name: Release
  11. runs-on: ubuntu-latest
  12. permissions:
  13. contents: write # to be able to publish a GitHub release
  14. issues: write # to be able to comment on released issues
  15. pull-requests: write # to be able to comment on released pull requests
  16. id-token: write # to enable use of OIDC for npm provenance
  17. steps:
  18. - name: Checkout
  19. uses: actions/checkout@v4
  20. with:
  21. fetch-depth: 0
  22. - name: Setup Node.js
  23. uses: actions/setup-node@v4
  24. with:
  25. node-version: "lts/*"
  26. - name: Install dependencies
  27. run: npm clean-install
  28. - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
  29. run: npm audit signatures
  30. - name: Release
  31. env:
  32. GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
  33. NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
  34. run: npx semantic-release