ci: validate npm publish authentication before publishing#437
Conversation
|
| echo "Checking npm publish authentication" | ||
|
|
||
| for scope in $NPM_PUBLISH_SCOPES; do | ||
| if ! yarn npm whoami --scope "$scope" --publish; then |
| publish_failed() { | ||
| echo "Error: npm publish failed." >&2 | ||
| echo "If npm reports a two-factor authentication error, use a granular access token with write access and bypass 2FA enabled for the published packages." >&2 | ||
| echo "The whoami preflight only verifies that the token is recognized by the publish registry; npm can still reject the actual package PUT for 2FA or package-level permission reasons." >&2 |
@check-spelling-bot Report🔴 Please reviewSee the 📂 files view, the 📜action log, or 📝 job summary for details.Unrecognized words (1)whoami To accept these unrecognized words as correct, you could run the following commands... in a clone of the git@github.com:OpenAPI-Qraft/openapi-qraft.git repository curl -s -S -L 'https://raw.githubusercontent.com/check-spelling/check-spelling/v0.0.24/apply.pl' |
perl - 'https://github.com/OpenAPI-Qraft/openapi-qraft/actions/runs/25860600524/attempts/1'
OR To have the bot accept them for you, comment in the PR quoting the following line: If the flagged items are 🤯 false positivesIf items relate to a ...
🚂 If you're seeing this message and your PR is from a branch that doesn't have check-spelling, |
No description provided.