From 0f6bfa19788912a872f2780a36a0c7a4ed3e76f5 Mon Sep 17 00:00:00 2001 From: Ry Jones Date: Wed, 24 Sep 2025 07:24:13 -0700 Subject: [PATCH] chore: update to OIDC Signed-off-by: Ry Jones --- .github/workflows/publish.yml | 15 +++++++++------ 1 file changed, 9 insertions(+), 6 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index f24dd217f..4b4abf220 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -3,19 +3,22 @@ name: Publish on: workflow_call: +permissions: + id-token: write # Required for OIDC + contents: read + jobs: publish-caliper: name: Publish Caliper runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - name: Use Node.js 18.x - uses: actions/setup-node@v3 + uses: actions/setup-node@v4 with: node-version: 18.x + # anchor to the smallest npm version supporting trusted publishing + - name: Update npm + run: npm install -g npm@11.5.1 - name: Publish Caliper run: .build/publish-caliper.sh - env: - NPM_TOKEN: ${{ secrets.NPM_TOKEN }} - DOCKER_USER: ${{ secrets.DOCKERHUB_USERNAME }} - DOCKER_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}