Update GH actions to use PAT and secrets.

Author: dishantlangayan

.github/workflows/onPushToMain.yml

@@ -38,8 +38,8 @@ jobs:
           sudo apt-get install -y git-core
           git --version
           echo "Path is ... $PATH"
-          git config --global user.email "dishantlangayan@gmail.com"
-          git config --global user.name "dishantlangayan"
+          git config --global user.email ${{ secrets.GH_EMAIL }}
+          git config --global user.name ${{ secrets.GH_USERNAME }}
       - name: Generate oclif README
         if: ${{ steps.version-check.outputs.skipped == 'false' }}
         id: oclif-readme
@@ -59,5 +59,5 @@ jobs:
           name: ${{ steps.version-check.outputs.tag }}
           tag: ${{ steps.version-check.outputs.tag }}
           commit: ${{ github.ref_name }}
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.GH_PAT }}
           skipIfReleaseExists: true

.github/workflows/onRelease.yml

@@ -2,7 +2,18 @@ name: publish
 
 on:
   release:
-    types: [released]
+    types: [published]
+  # support manual release in case something goes wrong and needs to be repeated or tested
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: tag that needs to publish
+        type: string
+        required: true
+
+permissions:
+  id-token: write # Required for OIDC
+  contents: read
 
 jobs:
   publish:
@@ -16,7 +27,5 @@ jobs:
       - run: npm install
       - run: npm run build
       - run: npm run prepack
-      - uses: JS-DevTools/npm-publish@v3
-        with:
-          token: ${{ secrets.NPM_TOKEN }}
+      - run: npm publish --access public
       - run: npm run postpack