From c55fa4d1ee358bb03ecef051cd517a9d8a8263bb Mon Sep 17 00:00:00 2001 From: Grace Date: Fri, 24 Jul 2026 16:03:01 +0100 Subject: [PATCH 1/2] Add id-token: write permission --- .github/workflows/build.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 43ab5f7..44282f3 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -11,6 +11,7 @@ jobs: permissions: contents: read packages: write + id-token: write steps: - uses: actions/checkout@v6 - uses: actions/setup-node@v6 From 62be0923c2a64d353ce7ffb3b18aca568eba0d45 Mon Sep 17 00:00:00 2001 From: Grace Date: Fri, 24 Jul 2026 16:03:31 +0100 Subject: [PATCH 2/2] Remove NODE_AUTH_TOKEN for publish step --- .github/workflows/build.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 44282f3..c5b5d48 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -31,5 +31,3 @@ jobs: path: ./storybook-static - run: npm publish --allow-directory=all if: github.event_name == 'release' && github.event.action == 'created' - env: - NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}