Skip to content

Publish Packages to npm #20

Publish Packages to npm

Publish Packages to npm #20

Workflow file for this run

# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
name: Publish Packages to npm
on:
workflow_dispatch:
inputs:
debug:
description: 'Enable debug output'
required: false
default: '0'
type: string
options:
- '0'
- '1'
jobs:
build:
runs-on: ubuntu-latest
permissions:
contents: write
id-token: write
steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
- uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f #v6.1.0
with:
node-version: '22'
registry-url: 'https://registry.npmjs.org'
cache: npm
scope: '@socketregistry'
- run: npm install -g npm@latest
- run: npm ci
- name: Build package
run: npm run build
- name: Get package version
id: package-version
run: echo "version=$(node -p "require('./package.json').version")" >> $GITHUB_OUTPUT
- run: npm pack
- run: npm publish --provenance --access public
env:
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
SOCKET_CLI_DEBUG: ${{ inputs.debug }}
- name: Create GitHub Release
id: create_release
uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e # v1
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
tag_name: v${{ steps.package-version.outputs.version }}
release_name: Release v${{ steps.package-version.outputs.version }}
body: |
Release of @socketsecurity/mcp v${{ steps.package-version.outputs.version }}
This release has been published to npm with provenance.
draft: false
prerelease: false
- name: Upload Package to Release
uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
upload_url: ${{ steps.create_release.outputs.upload_url }}
asset_path: ./socketsecurity-mcp-${{ steps.package-version.outputs.version }}.tgz
asset_name: socketsecurity-mcp-${{ steps.package-version.outputs.version }}.tgz
asset_content_type: application/gzip