ci: 👷 use npm token only when required

nabla-studio · Oct 26, 2024 · 4b40897 · 4b40897
1 parent 84db229
commit 4b40897
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 4 deletions.
diff --git a/.github/workflows/release-preview.yml b/.github/workflows/release-preview.yml
@@ -17,8 +17,6 @@ jobs:
       RELEASE_PREID: ${{ vars.RELEASE_PREID }}
       RELEASE_SPECIFIER: ${{ vars.RELEASE_SPECIFIER }}
       RELEASE_TAG: ${{ vars.RELEASE_TAG }}
-      NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-      NPM_CONFIG_PROVENANCE: true
 
     steps:
       # Step 1: Check out the repository code
@@ -65,6 +63,9 @@ jobs:
 
       # Step 9: Run the release
       - name: Run Nx release version
+        env: 
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
         run: bun run tools/scripts/release.ts -d false
 
       # Step 10: Clean up dist directory

diff --git a/.github/workflows/release-production.yml b/.github/workflows/release-production.yml
@@ -15,8 +15,6 @@ jobs:
       id-token: write # needed for provenance data generation
     env:
       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-      NPM_CONFIG_PROVENANCE: true
 
     steps:
       # Step 1: Check out the repository code
@@ -63,6 +61,9 @@ jobs:
 
       # Step 9: Run the release
       - name: Run Nx release version
+        env: 
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
         run: bun run tools/scripts/release.ts -d false
 
       # Step 10: Clean up dist directory