Granular NPM token description

for release pipeline
politie · Dec 19, 2022 · de3e8ec · de3e8ec
1 parent 588f0ea
commit de3e8ec
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -69,7 +69,9 @@ jobs:
       - name: Release sherlock
         uses: JS-DevTools/npm-publish@v1
         with:
-          # This is an automation type NPM access token.
+          # This is a granular NPM access token with
+          # "Packages and scopes" permission "Read and write"
+          # for this package only.
           token: ${{ secrets.WORKFLOW_NPM_TOKEN }}
           package: dist/sherlock/package.json