From edb15fd6cfc63377e7ce87889a9619888d9bdaf5 Mon Sep 17 00:00:00 2001 From: Mauricio Siu Date: Wed, 15 Apr 2026 21:13:21 -0600 Subject: [PATCH] chore: update GitHub Actions workflow to use GitHub token - Replaced the usage of secrets.GH_TOKEN with github.token in onPushToMain.yml for improved security and access management during the release process. --- .github/workflows/onPushToMain.yml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/.github/workflows/onPushToMain.yml b/.github/workflows/onPushToMain.yml index d350f43..3141a4f 100644 --- a/.github/workflows/onPushToMain.yml +++ b/.github/workflows/onPushToMain.yml @@ -12,8 +12,6 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - with: - token: ${{ secrets.GH_TOKEN }} - uses: pnpm/action-setup@v6 with: @@ -43,7 +41,7 @@ jobs: echo "tag=v$package_version" >> $GITHUB_OUTPUT fi env: - GH_TOKEN: ${{ secrets.GH_TOKEN }} + GH_TOKEN: ${{ github.token }} - name: Create Github Release if: steps.version-check.outputs.skipped == 'false' @@ -52,7 +50,7 @@ jobs: name: ${{ steps.version-check.outputs.tag }} tag: ${{ steps.version-check.outputs.tag }} commit: ${{ github.ref_name }} - token: ${{ secrets.GH_TOKEN }} + token: ${{ github.token }} skipIfReleaseExists: true - name: Publish to npm