Short title
Trusted publishing for npm packages
What CI/CD gap does this address?
Currently we use the granualr token for NPM packate publishing whin need to generated new every 90 days.
Proposed workflow or action
To reduce the effort we shll swithc to "Trusted publishing for npm packages". See also
https://docs.npmjs.com/trusted-publishers
Short title
Trusted publishing for npm packages
What CI/CD gap does this address?
Currently we use the granualr token for NPM packate publishing whin need to generated new every 90 days.
Proposed workflow or action
To reduce the effort we shll swithc to "Trusted publishing for npm packages". See also
https://docs.npmjs.com/trusted-publishers