Granular NPM token description

for release pipeline
politie · Dec 19, 2022 · 19006f8 · 19006f8
1 parent 100c6d2
commit 19006f8
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -79,6 +79,8 @@ jobs:
       - name: Release
         uses: JS-DevTools/npm-publish@v1
         with:
-          # This is an automation type NPM access token.
+          # This is a granular NPM access token with
+          # "Packages and scopes" permission "Read and write"
+          # for this package only.
           token: ${{ secrets.WORKFLOW_NPM_TOKEN }}
           package: dist/politie/ngx-sherlock/package.json