Improve npm publish security as per recommendations

crisp-oss · Jan 8, 2023 · fbe414b · fbe414b
1 parent f0bd94f
commit fbe414b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -23,6 +23,6 @@ jobs:
         run: node --version && npm --version && node -p process.versions.v8
 
       - name: Release package
-        run: npm publish
+        run: npm publish --ignore-scripts
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}