Use trusted publishing

.editorconfig

@@ -12,3 +12,7 @@ indent_size = 4
 [{package.json,.travis.yml,nightwatch.json}]
 indent_style = space
 indent_size = 2
+
+[.github/**.yml]
+indent_style = space
+indent_size = 2

.github/workflows/codeql.yml

@@ -9,7 +9,7 @@ on:
     branches: [master]
     types: [synchronize, opened, reopened]
   schedule:
-    - cron: '22 17 * * 5'
+    - cron: "22 17 * * 5"
 
 jobs:
   analyze:
@@ -23,11 +23,11 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        language: [ 'javascript' ]
+        language: ["javascript"]
 
     steps:
       - name: Checkout repository
-      uses: actions/checkout@v3
+        uses: actions/checkout@v6
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v2

.github/workflows/master.yml

@@ -10,12 +10,13 @@ jobs:
   main:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
 
       - name: Set node version
-      uses: actions/setup-node@v3
+        uses: actions/setup-node@v6
         with:
-        node-version: '18.x'
+          node-version: 18
+          registry-url: "https://registry.npmjs.org"
 
       - name: Install
         run: |

.github/workflows/pull_requests.yml

@@ -9,12 +9,13 @@ jobs:
   main:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
 
       - name: Set node version
-      uses: actions/setup-node@v3
+        uses: actions/setup-node@v6
         with:
-        node-version: '18.x'
+          node-version: 18
+          registry-url: "https://registry.npmjs.org"
 
       - name: Install
         run: |

.github/workflows/releases.yml

@@ -4,7 +4,11 @@ on:
   workflow_dispatch:
   push:
     tags:
-    - 'v*'
+      - "v*"
+
+permissions:
+  id-token: write
+  contents: read
 
 env:
   REGISTRY: ghcr.io
@@ -16,12 +20,13 @@ jobs:
   main:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
 
       - name: Set node version
-      uses: actions/setup-node@v3
+        uses: actions/setup-node@v6
         with:
-        node-version: '18.x'
+          node-version: 18
+          registry-url: "https://registry.npmjs.org"
 
       - name: Install
         run: |
@@ -47,7 +52,7 @@ jobs:
 
       - name: Image Metadata
         id: image-metadata
-      uses: docker/metadata-action@v4
+        uses: docker/metadata-action@v5
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           tags: |
@@ -91,6 +96,4 @@ jobs:
           body: "See the [CHANGELOG](https://github.com/gchq/CyberChef/blob/master/CHANGELOG.md) and [commit messages](https://github.com/gchq/CyberChef/commits/master) for details."
 
       - name: Publish to NPM
-      uses: JS-DevTools/npm-publish@v1
-      with:
-        token: ${{ secrets.NPM_TOKEN }}
+        run: npm publish