luna/oh-my-opencode
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: add NODE_AUTH_TOKEN to publish-main job for npm auth

Browse Source 
The publish-main job relied on npm trusted publishing (OIDC) which
broke after the repo rename from oh-my-opencode to oh-my-openagent.
Adding explicit NODE_AUTH_TOKEN restores auth while --provenance
still uses OIDC for Sigstore attestation.

Fixes #2373
This commit is contained in:
YeonGyu-Kim
2026-03-08 03:36:52 +09:00
parent fd9642a6ab
commit fc64f2d6f0
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/publish.yml
+2 -2
View File
@@ -213,8 +213,8 @@ jobs:
fi fi
npm publish --access public --provenance $TAG_ARG npm publish --access public --provenance $TAG_ARG
env: env:
NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN }}
NPM_CONFIG_PROVENANCE: true NPM_CONFIG_PROVENANCE: true
- name: Publish oh-my-openagent - name: Publish oh-my-openagent
if: steps.check.outputs.skip != 'true' if: steps.check.outputs.skip != 'true'
run: | run: |
@@ -242,8 +242,8 @@ jobs:
fi fi
npm publish --access public --provenance $TAG_ARG || echo "oh-my-openagent publish may have failed (package may already exist)" npm publish --access public --provenance $TAG_ARG || echo "oh-my-openagent publish may have failed (package may already exist)"
env: env:
NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN }}
NPM_CONFIG_PROVENANCE: true NPM_CONFIG_PROVENANCE: true
- name: Restore package.json - name: Restore package.json
if: steps.check.outputs.skip != 'true' if: steps.check.outputs.skip != 'true'
run: | run: |