ci(INFRAPRJ-6604): set target to jfrog registry #51

	name: Release crypto-icons package

	on:
	pull_request:
	# on:
	# push:
	# branches:
	# - main
	# paths:
	# - "lib/**"

	permissions:
	id-token: write
	packages: write
	contents: read
	attestations: write

	env:
	NPM_REGISTRY: jfrog.ledgerlabs.net/artifactory/api/npm/ledgerlive-npm-prod-public

	jobs:
	publish:
	runs-on: ledgerhq-shared-medium
	defaults:
	run:
	working-directory: ./lib/
	steps:
	- uses: actions/checkout@v4
	- uses: pnpm/action-setup@v2
	with:
	version: 9
	- uses: actions/setup-node@v4
	with:
	node-version: 20
	registry-url: https://registry.npmjs.org/

	- name: Install dependencies
	run: pnpm install --frozen-lockfile

	- name: pnpm build
	run: pnpm run build

	- name: Pack npm to tarball for attestation
	run: \|
	echo "TARBALL=$(pnpm pack)" >> $GITHUB_ENV

	- name: Attest
	uses: LedgerHQ/actions-security/actions/attest@actions/attest-1
	with:
	subject-path: ./lib

	- name: Sign
	uses: LedgerHQ/actions-security/actions/sign-blob@actions/sign-blob-1
	with:
	path: ./lib

	- name: Login to JFrog Ledger
	id: jfrog-login
	uses: LedgerHQ/actions-security/actions/jfrog-login@actions/jfrog-login-1

	- name: Setup npm config for JFrog
	env:
	NPM_REGISTRY_TOKEN: ${{ steps.jfrog-login.outputs.oidc-token }}
	run: \|
	cat << EOF \| tee .npmrc
	registry=https://${NPM_REGISTRY}/
	//${NPM_REGISTRY}/:_authToken=${NPM_REGISTRY_TOKEN}
	EOF

	- name: Publish package
	run: pnpm publish $TARBALL --no-git-checks

Provide feedback