Socket MCP Server

# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json name: Publish Packages to npm on: workflow_dispatch: inputs: debug: description: 'Enable debug output' required: false default: '0' type: string options: - '0' - '1' jobs: build: runs-on: ubuntu-latest permissions: contents: write id-token: write steps: - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f #v6.1.0 with: node-version: '22' registry-url: 'https://registry.npmjs.org' cache: npm scope: '@socketregistry' - run: npm install -g npm@latest - run: npm ci - name: Build package run: npm run build - name: Get package version id: package-version run: echo "version=$(node -p "require('./package.json').version")" >> $GITHUB_OUTPUT - run: npm pack - run: npm publish --provenance --access public env: NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} SOCKET_CLI_DEBUG: ${{ inputs.debug }} - name: Create GitHub Release id: create_release uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e # v1 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: tag_name: v${{ steps.package-version.outputs.version }} release_name: Release v${{ steps.package-version.outputs.version }} body: | Release of @socketsecurity/mcp v${{ steps.package-version.outputs.version }} This release has been published to npm with provenance. draft: false prerelease: false - name: Upload Package to Release uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: upload_url: ${{ steps.create_release.outputs.upload_url }} asset_path: ./socketsecurity-mcp-${{ steps.package-version.outputs.version }}.tgz asset_name: socketsecurity-mcp-${{ steps.package-version.outputs.version }}.tgz asset_content_type: application/gzip