ci: use github secrets (#940)

Author: v1v

.github/actions/setup-totp/action.yml

@@ -24,19 +24,6 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - uses: elastic/apm-pipeline-library/.github/actions/setup-npmrc@current
-        with:
-          secret: secret/jenkins-ci/npmjs/elasticmachine
-          vault-url: ${{ secrets.VAULT_ADDR }}
-          vault-role-id: ${{ secrets.VAULT_ROLE_ID }}
-          vault-secret-id: ${{ secrets.VAULT_SECRET_ID }}
-
-      - uses: ./.github/actions/setup-totp
-        with:
-          vault-url: ${{ secrets.VAULT_ADDR }}
-          vault-role-id: ${{ secrets.VAULT_ROLE_ID }}
-          vault-secret-id: ${{ secrets.VAULT_SECRET_ID }}
-
       - name: Validate version input is a valid semver
         run: |
             if ! [[ "${VERSION}" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-[a-z0-9.]+)?(\+[a-z0-9.]+)?$ ]]; then
@@ -54,6 +41,9 @@ jobs:
             exit 1 ;;
           esac
 
+      - name: configure NPMJS token
+        run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > .npmrc
+
       - name: NPM dist-tag
         run: |
-          npm dist-tag --otp=${TOTP_CODE} add "@elastic/synthetics@${VERSION}" "${DIST_TAG}"
+          npm dist-tag add "@elastic/synthetics@${VERSION}" "${DIST_TAG}"

.github/workflows/dist-tag.yml

@@ -28,18 +28,11 @@ jobs:
         with:
           fetch-depth: 0
       - uses: elastic/apm-pipeline-library/.github/actions/setup-git@current
-      - uses: elastic/apm-pipeline-library/.github/actions/setup-npmrc@current
-        with:
-          secret: secret/jenkins-ci/npmjs/elasticmachine
-          vault-url: ${{ secrets.VAULT_ADDR }}
-          vault-role-id: ${{ secrets.VAULT_ROLE_ID }}
-          vault-secret-id: ${{ secrets.VAULT_SECRET_ID }}
       - run: npm ci # runs npm prepublish
-      - uses: ./.github/actions/setup-totp
-        with:
-          vault-url: ${{ secrets.VAULT_ADDR }}
-          vault-role-id: ${{ secrets.VAULT_ROLE_ID }}
-          vault-secret-id: ${{ secrets.VAULT_SECRET_ID }}
+
+      - name: configure NPMJS token
+        run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > .npmrc
+
       - run: npx semantic-release --dry-run="${DRY_RUN}"
         env:
           DRY_RUN: ${{ github.event.inputs.dry-run }}
@@ -52,7 +45,7 @@ jobs:
 
       - name: Create 'stack_release' dist-tag
         if: ${{ github.event.inputs.dry-run == 'false' && github.event.inputs.is-stack-release == 'true' }}
-        run: npm dist-tag --otp=${TOTP_CODE} add "${NPM_PACKAGE}@${VERSION}" stack_release
+        run: npm dist-tag add "${NPM_PACKAGE}@${VERSION}" stack_release
 
       - if: ${{ always() && github.event.inputs.dry-run == 'false' }}
         uses: elastic/oblt-actions/slack/notify-result@v1

.github/workflows/release.yml

@@ -12,7 +12,7 @@
     [
       "@semantic-release/exec",
       {
-        "publishCmd": "npm publish --otp=${process.env.TOTP_CODE}"
+        "publishCmd": "npm publish"
       }
     ],
     "@semantic-release/github"