migration-script-runner / msr-core / e2fabd04-7ca0-4e78-b0f6-819e2500271c

100%

push

circleci

#133: Enable token-less npm publishing with OIDC and provenance

Automated npm publishing using OpenID Connect instead of long-lived tokens.
No token rotation needed. Package published with cryptographic provenance.

- Added publishConfig.provenance to package.json
- Updated workflow with id-token: write permission
- Modernized to Node 20, native npm publish

1194 of 1194 branches covered (100.0%)

Branch coverage included in aggregate %.

2452 of 2452 relevant lines covered (100.0%)

263.55 hits per line