npm-oidc-publishing

Configure npm Trusted Publishing with OpenID Connect for GitHub Actions workflows.

Updated Dec 25, 2025

Search Tags:#publishing #npm #github-actions #changesets #oidc #trusted-publisher

One-click install

npx skills add https://github.com/Tasty-Maker-Studio/Discourser-Design-System --skill npm-oidc-publishing

Or copy as Structured Prompt for Agent▼

Please help me install this Agent Skill.
Skill: npm-oidc-publishing
Source: https://github.com/Tasty-Maker-Studio/Discourser-Design-System/tree/main/.claude/skills/npm-oidc-publishing
Command: npx skills add https://github.com/Tasty-Maker-Studio/Discourser-Design-System --skill npm-oidc-publishing

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill guides configuring npm Trusted Publishing with OpenID Connect (OIDC) so CI/CD can publish packages without token management, reducing risk and friction.

Core Features & Use Cases

Trusted Publisher Setup: Connect npm Trusted Publisher to your GitHub Actions workflow.
Workflow Configuration: Node 24, id-token: write, and publishing with provenance.
Troubleshooting & Verification: ENEEDAUTH, 404 errors, and ensuring no NPM_TOKEN.

Quick Start

In your release workflow, publish with npm publish --provenance --access public and ensure id-token: write is configured.