mirror of
https://github.com/tenrok/axios.git
synced 2026-06-17 19:21:29 +03:00
Shaan Majid
a04dd96dbb
* ci: add zizmor GitHub Actions security scanner * fix(ci): prevent script injection via env vars * fix(ci): set persist-credentials: false across workflows
32 lines
773 B
YAML
32 lines
773 B
YAML
name: Publish package to NPM
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- 'v1.*.*'
|
|
|
|
permissions:
|
|
contents: read
|
|
id-token: write
|
|
|
|
jobs:
|
|
publish:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout repo
|
|
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
with:
|
|
persist-credentials: false
|
|
- name: Setup Node.js
|
|
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
|
|
with:
|
|
node-version: 24.x
|
|
registry-url: 'https://registry.npmjs.org'
|
|
package-manager-cache: false
|
|
- name: Install dependencies
|
|
run: npm ci
|
|
- name: Build project
|
|
run: npm run build
|
|
- name: Publish to NPM
|
|
run: npm publish --provenance --access public
|