publish-canary.yml

name: Publish Canary
on:
  push:
    branches:
      - main

jobs:
  publish-canary:
    name: Publish Canary
    if: github.event.pull_request.head.repo.fork == false
    runs-on: wallet-tools-linux-medium
    permissions:
      contents: read

    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
        with:
          egress-policy: audit

      - name: Checkout repository
        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Setup NodeJS Environment
        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
        with:
          node-version: 18.x

      - name: Install dependencies
        run: npm install

      - name: Create .npmrc
        run: |
          touch .npmrc
          echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" >> .npmrc

      - name: Set prerelease version
        run: |
          npm version prerelease --preid="canary.$(git rev-parse --short HEAD)" --no-git-tag-version

      - name: Publish
        run: npm publish --tag canary --public
        env:
          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}