fix: remove NPM_TOKEN and NODE_AUTH_TOKEN from release workflow for security

andrewmolyuk · andrewmolyuk · commit cabfa83e4a70 · 2026-02-10T22:52:38.000+02:00
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -35,3 +35,6 @@ jobs:
         run: npx semantic-release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NODE_AUTH_TOKEN: ''
+          NPM_TOKEN: ''
+          NPM_CONFIG_USERCONFIG: /dev/null
