Merge pull request #108 from LedgerHQ/readme/update #82

	name: Release crypto-icons package

	on:
	push:
	branches:
	- main
	paths:
	- "lib/**"
	workflow_dispatch:

	permissions:
	id-token: write
	packages: write
	contents: read
	attestations: write

	env:
	NPM_REGISTRY: jfrog.ledgerlabs.net/artifactory/api/npm/ledgerlive-npm-prod-public

	jobs:
	publish:
	runs-on: public-ledgerhq-shared-small
	defaults:
	run:
	working-directory: ./lib/
	steps:
	- uses: actions/checkout@v4
	- uses: pnpm/action-setup@v2
	with:
	version: 9.6.0
	- uses: actions/setup-node@v4
	with:
	node-version: 20
	registry-url: https://registry.npmjs.org/

	- name: Install dependencies
	run: pnpm install --frozen-lockfile

	- name: Build project
	run: pnpm run build

	- name: Create tarball for attestation
	run: \|
	echo "TARBALL=$(pnpm pack --pack-destination dist)" >> $GITHUB_ENV

	- name: Attest tarball
	uses: LedgerHQ/actions-security/actions/attest@actions/attest-1
	with:
	subject-path: ./lib/dist

	- name: Sign tarball
	uses: LedgerHQ/actions-security/actions/sign-blob@actions/sign-blob-1
	with:
	path: ./lib/dist

	- name: Login to JFrog Ledger
	id: jfrog-login
	uses: LedgerHQ/actions-security/actions/jfrog-login@actions/jfrog-login-1

	- name: Setup npm config for JFrog
	env:
	NPM_REGISTRY_TOKEN: ${{ steps.jfrog-login.outputs.oidc-token }}
	run: \|
	cat << EOF \| tee .npmrc
	registry=https://${NPM_REGISTRY}/
	//${NPM_REGISTRY}/:_authToken=${NPM_REGISTRY_TOKEN}
	EOF

	- name: Publish package to JFrog
	run: pnpm publish $TARBALL --no-git-checks

Provide feedback