CFA via Semantic Release in a simple action
name: Publishon: [push]permissions:
id-token: writejobs:
build:
runs-on: ubuntu-latestenvironment: npmsteps:
# For security please pin this to the SHA of the latest release# - https://github.com/actions/checkout/releases/latest
- uses: actions/checkout@{sha}with:
# This is key, ensure that you set this on your checkoutpersist-credentials: false# For security please pin this to the SHA of the latest release# - https://github.com/continuousauth/action/releases/latest
- uses: continuousauth/action@{sha}with:
project-id: ${{ secrets.CFA_PROJECT_ID }}secret: ${{ secrets.CFA_SECRET }}npm-token: ${{ secrets.NPM_TOKEN }}