rizqyfahmi is automatically publishing #23

	name: CI Pipeline
	run-name: ${{ github.actor }} is automatically publishing

	on:
	push:
	branches:
	- master

	jobs:
	lint:
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4

	- name: Use Node.js
	uses: actions/setup-node@v4
	with:
	node-version: 24.4.1

	- name: Install dependencies
	run: npm install

	- name: Run lint
	run: npm run lint
	test:
	needs: [lint]
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4

	- name: Use Node.js
	uses: actions/setup-node@v4
	with:
	node-version: 24.4.1

	- name: Install dependencies
	run: npm install

	- name: Run tests with coverage
	run: npm run test

	- name: Upload coverage reports to Codecov
	uses: codecov/codecov-action@v5
	with:
	token: ${{ secrets.CODECOV_TOKEN }}
	publish:
	needs: [test]
	permissions:
	id-token: write
	contents: write
	issues: write
	pull-requests: write
	runs-on: ubuntu-latest
	steps:
	- name: 'Generate token'
	id: GENERATE_TOKEN
	uses: actions/create-github-app-token@v2
	with:
	app-id: ${{ secrets.BOT_APP_ID }}
	private-key: ${{ secrets.BOT_PRIVATE_KEY }}

	- name: Checkout
	uses: actions/checkout@v4

	- name: Use Node.js
	uses: actions/setup-node@v4
	with:
	node-version: 24.4.1

	- name: Install dependencies
	run: npm install

	- name: Build package
	run: npm run build

	- name: Pack npm package
	run: npm pack

	- name: List contents (for debugging)
	run: ls -l

	- name: Sign package
	uses: sigstore/gh-action-sigstore-python@v3.0.1
	with:
	inputs: "*.tgz"

	- name: Run Semantic Release
	env:
	GITHUB_TOKEN: ${{ steps.GENERATE_TOKEN.outputs.token }}
	NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
	run: npx semantic-release

Provide feedback