socket-packageurl-js/.github/workflows/provenance.yml at main · SocketDev/socket-packageurl-js · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
name: 📦 Publish

# Dependencies:
#   - SocketDev/socket-registry/.github/workflows/provenance.yml

on:
  workflow_dispatch:
    inputs:
      dist-tag:
        description: 'npm dist-tag (latest, next, beta, canary, backport, etc.)'
        required: false
        default: 'latest'
        type: string
      debug:
        description: 'Enable debug output'
        required: false
        default: '0'
        type: choice
        options:
          - '0'
          - '1'

permissions:
  contents: write
  id-token: write


jobs:
  publish:
    uses: SocketDev/socket-registry/.github/workflows/provenance.yml@ea1986b8019fedee5fb38b485690b13ad8e0217f # main
    with:
      debug: ${{ inputs.debug }}
      dist-tag: ${{ inputs.dist-tag }}
      package-name: '@socketregistry/packageurl-js'
      publish-script: 'publish:ci'
      setup-script: 'ci:validate'
      use-trusted-publishing: true
    secrets:
      SOCKET_API_KEY: ${{ secrets.SOCKET_API_TOKEN }}