xgqfrms/GitHub package bugs All In One.md

## GitHub package bugs All In One.md

      
    Raw
  

              GitHub package bugs All In One.md
            
          
    GitHub package bugs All In One

what's the right valid access token and appropriate scopes for publishing one GitHub package?


my .npmrc

- //npm.pkg.github.com/:_authToken=GITHUB_TOKEN
+ //npm.pkg.github.com/:_authToken=${GITHUB_TOKEN}
@xgqfrms:registry=https://npm.pkg.github.com
what's wrong with that


error message

https://github.com/xgqfrms/wcui/runs/7739940709?check_suite_focus=true#step:5:28

Q1: what's the right way of GITHUB_TOKEN usage?


without ${} symbol wrapped

//npm.pkg.github.com/:_authToken=GITHUB_TOKEN
@xgqfrms:registry=https://npm.pkg.github.com


with ${} symbol wrapped

//npm.pkg.github.com/:_authToken=${GITHUB_TOKEN}
@xgqfrms:registry=https://npm.pkg.github.com


Q2: where do the secrets NPM_TOKEN come from for GitHub Action workflow?

   NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}


copy from npm tokens

https://www.npmjs.com/settings/xgqfrms/tokens

just same as the GITHUB_TOKEN, which is GitHub Access Token

https://github.com/xgqfrms/wcui/blob/main/.github/workflows/npm-publish-github-packages.yml#L36