chore(ci): OIDC publishing (#175)

Author: rvagg

.github/workflows/test-and-release.yml

@@ -27,6 +27,9 @@ jobs:
     needs: test
     runs-on: ubuntu-latest
     if: github.event_name == 'push' && github.ref == 'refs/heads/master'
+    permissions:
+      contents: write
+      id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -36,6 +39,7 @@ jobs:
         uses: actions/setup-node@v6.2.0
         with:
           node-version: lts/*
+          registry-url: 'https://registry.npmjs.org'
       - name: Install dependencies
         run: |
           npm install --no-progress --no-package-lock --no-save
@@ -53,6 +57,6 @@ jobs:
       - name: Release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
         run: npx semantic-release
 

README.md

@@ -6,9 +6,9 @@
 >
 > Geppetto had a very bad temper. Woe to the one who called him Polendina! He became as wild as a beast and no one could soothe him.
 
-![CI](https://github.com/rvagg/polendina/workflows/CI/badge.svg?branch=master)
+[![CI](https://github.com/rvagg/polendina/actions/workflows/test-and-release.yml/badge.svg)](https://github.com/rvagg/polendina/actions/workflows/test-and-release.yml)
 
-[![NPM](https://nodei.co/npm/polendina.svg)](https://nodei.co/npm/polendina/)
+[![NPM](https://nodei.co/npm/polendina.svg?style=flat&data=n,v&color=blue)](https://nodei.co/npm/polendina/)
 
 * [What and why?](#what-and-why)
 * [Usage](#usage)