ci: set explicit permissions for npm-publish workflow

Automattic · Nov 7, 2023 · 50cb74a · 50cb74a
1 parent 488586a
commit 50cb74a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
@@ -9,6 +9,9 @@ jobs:
     name: Publish to npm
     runs-on: ubuntu-latest
     if: contains( github.event.pull_request.labels.*.name, '[ Type ] NPM version update' ) && startsWith( github.head_ref, 'release/') && github.event.pull_request.merged == true
+    permissions:
+      contents: write
+      id-token: write
     steps:
       - uses: Automattic/vip-actions/[email protected]
         with:

diff --git a/package.json b/package.json
@@ -81,7 +81,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/Automattic/vip.git"
+    "url": "https://github.com/Automattic/vip-cli"
   },
   "keywords": [
     "cli",