Update release workflow with OIDC permissions

Added permissions for OIDC and cleared auth token.
This commit is contained in:
암냥 2025-11-28 12:01:35 +09:00 committed by GitHub
commit 3eb4a9f6ae
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -5,19 +5,26 @@ on:
branches: branches:
- release - release
permissions:
id-token: write # Required for OIDC
contents: write
jobs: jobs:
release: release:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Checkout branch - name: Checkout branch
uses: actions/checkout@v6 uses: actions/checkout@v6
# - name: Setup pnpm - name: Setup pnpm
# uses: pnpm/action-setup@v4 uses: pnpm/action-setup@v4
- name: Setup node.js 20 - name: Setup node.js 20
uses: actions/setup-node@v6 uses: actions/setup-node@v6
with: with:
node-version: 24 node-version: 24
cache: 'npm' cache: 'npm'
- name: Clear auth token for OIDC
run: echo "NODE_AUTH_TOKEN=" >> $GITHUB_ENV
- name: Install Dependencies - name: Install Dependencies
run: npm i --frozen-lockfile run: npm i --frozen-lockfile
- name: release - name: release