Merge pull request #437 from AndreaPontrandolfo/AndreaPontrandolfo/issue436

AndreaPontrandolfo/issue436

Author: AndreaPontrandolfo

.changeset/tough-fireants-know.md

@@ -0,0 +1,8 @@
+---
+'eslint-config-sheriff': minor
+'@sherifforg/create-config': minor
+'@sherifforg/cli': minor
+---
+
+fix: Fix CI workflow for OICD trusted publishing workflow
+Fixes #436

.github/workflows/release.yml

@@ -6,14 +6,18 @@ on:
 
 concurrency: ${{ github.workflow }}-${{ github.ref }}
 
+permissions:
+  contents: read # for checkout
+
 jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
     permissions:
-      contents: write
-      id-token: write
-      pull-requests: write
+      contents: write # to be able to publish a GitHub release
+      issues: write # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
+      id-token: write # to be able to publish to npm using OIDC
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -25,7 +29,7 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version-file: package.json
-          cache: 'pnpm'
+          cache: "pnpm"
       - name: Install dependencies
         run: pnpm install
       - name: Create Release Pull Request or Publish to npm

packages/eslint-config-sheriff/package.json

@@ -118,6 +118,9 @@
     "node": ">=22.21.1"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true,
+    "registry": "https://registry.npmjs.org/",
+    "tag": "latest"
   }
 }

packages/sheriff-cli/package.json

@@ -69,6 +69,9 @@
     "node": ">=22.21.1"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true,
+    "registry": "https://registry.npmjs.org/",
+    "tag": "latest"
   }
 }

packages/sheriff-create-config/package.json

@@ -77,6 +77,9 @@
     "node": ">=22.21.1"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true,
+    "registry": "https://registry.npmjs.org/",
+    "tag": "latest"
   }
 }