update action trigger, add --access public to npm publish (#237)

* add PRs to trigger so it runs for forks, scope push to reduce dupe runs

* npm publish add --access public

* bump version of setup-node to include latest patch

.github/workflows/cicd.yml

@@ -1,6 +1,11 @@
 name: CI/CD
 
-on: push
+on:
+  pull_request:  # any pull request
+  push:
+    branches:
+      - master
+      - release
 
 env:
   AWS_DEFAULT_REGION: us-east-1
@@ -268,7 +273,7 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install Node ${{ env.NODE_VERSION }} on ${{ matrix.os }}
-        uses: actions/setup-node@v1.4.0
+        uses: actions/setup-node@v1.4.1
         with:
           node-version: ${{ env.NODE_VERSION }}
           registry-url: https://registry.npmjs.org
@@ -334,7 +339,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: Install Node ${{ env.NODE_VERSION }} on ${{ matrix.os }}
-        uses: actions/setup-node@v1.4.0
+        uses: actions/setup-node@v1.4.1
         with:
           node-version: ${{ env.NODE_VERSION }}
           registry-url: https://registry.npmjs.org
@@ -346,12 +351,12 @@ jobs:
       - name: Publish Distribution 📦 to npm (dev)
         if: github.ref == 'refs/heads/master'
         run: |
-          find ./artifacts -name 'onica-runway-*.*.*-*.tgz' -exec npm publish {} --tag dev \;
+          find ./artifacts -name 'onica-runway-*.*.*-*.tgz' -exec npm publish {} --access public --tag dev \;
       - name: Publish Distribution 📦 to npm
         if: startsWith(github.event.ref, 'refs/tags')
         # TODO support alpha, beta, and rc tags
         run: |
-          find ./artifacts -name 'onica-runway-*.*.*-*.tgz' -exec npm publish {} \;
+          find ./artifacts -name 'onica-runway-*.*.*-*.tgz' -exec npm publish {} --access public \;
 
   build-pypi:
     name: Build PyPi 📦