ci: shift npm audit signatures to prepublish script

duddu · May 3, 2024 · 20258ce · 20258ce
1 parent d85a17a
commit 20258ce
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 10 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -19,8 +19,6 @@ jobs:
       pull-requests: write
       id-token: write
       actions: write
-    env:
-      GH_TOKEN: ${{ github.token }}
 
     steps:
       - name: Checkout
@@ -36,14 +34,12 @@ jobs:
       - name: Install dependencies
         run: npm clean-install
 
-      - name: Verify dependencies signatures
-        run: npm audit signatures
-
       - name: Release
         env:
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           GITHUB_TOKEN: ${{ github.token }}
+          GH_TOKEN: ${{ github.token }}
         run: |
           npx semantic-release \
             | grep --color -Ei "the next release version is|$" \
-              || gh run cancel ${{ github.run_id }} && sleep 5
+              || gh run cancel ${{ github.run_id }} && sleep 3
diff --git a/package.json b/package.json
@@ -20,15 +20,15 @@
   "main": "dist/index.js",
   "scripts": {
     "lint": "eslint src/**/*.ts",
-    "prettier": "prettier -w .",
-    "typedoc": "typedoc",
+    "test": "jest --verbose",
     "convertSchema": "./bin/convertSchema.sh",
     "bundle": "rimraf ./dist && tsc && cp -R ./src/bin ./dist",
     "build": "npm run convertSchema && npm run bundle",
     "link": "npm run build && npm link",
     "watch": "npm run link && nodemon",
-    "test": "jest --verbose",
-    "prepublishOnly": "npm run lint && npm run test && npm run build"
+    "prettier": "prettier -w .",
+    "typedoc": "typedoc",
+    "prepublishOnly": "npm audit signatures && npm run lint && npm run test && npm run build"
   },
   "devDependencies": {
     "@jest/globals": "^29.7.0",