Add top-level OIDC permissions to publish workflow

Co-authored-by: Ona <no-reply@ona.com>
Use bunx npm publish for trusted publishing (#6 )
2026-03-20 11:51:17 +00:00 · 2026-03-14 01:23:05 +00:00 · 2026-03-14 01:19:35 +00:00
1 changed files with 4 additions and 0 deletions
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -4,6 +4,10 @@ on:
  release:
    types: [published]

+permissions:
+  id-token: write  # Required for OIDC
+  contents: read
+
 jobs:
  publish:
    runs-on: ubuntu-latest
Author	SHA1	Message	Date
Kenneth	2404c838c3	Add top-level OIDC permissions to publish workflow Co-authored-by: Ona <no-reply@ona.com>	2026-03-14 01:23:05 +00:00
Kenneth	650e2141d8	Use bunx npm publish for trusted publishing (#6 ) bun publish does not pick up the OIDC token for npm trusted publishing. Co-authored-by: Ona <no-reply@ona.com>	2026-03-14 01:19:35 +00:00