Update publish.yml

Signed-off-by: Philipp Burckhardt <[email protected]>
stdlib-js · Mar 7, 2024 · 4830baf · 4830baf
1 parent 318aa6c
commit 4830baf
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -201,9 +201,11 @@ jobs:
 
       # Publish package to npm:
       - name: 'Publish package to npm'
-        run: npm publish --provenance --access public
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        # Pin action to full length commit SHA
+        uses: JS-DevTools/npm-publish@4b07b26a2f6e0a51846e1870223e545bae91c552 # v3.0.1
+        with:
+          token: ${{ secrets.NPM_TOKEN }}
+          access: public
 
       # Discard any uncommitted changes:
       - name: 'Discard any uncommitted changes'