Publish from GitHub Actions using multi-factor authentication

Hacker News

The backstory about this GitHub Action: I discussed with an open-source maintainer why they publish npm packages from their local machine and do not use CI/CD pipelines. They said publishing should require human intervention and want to continue using multi-factor authentication to publish to the npm registry. This led to building the wait-for-secrets GitHub Action. It prints a URL in the build log and waits for secrets to be entered using a browser. Once entered, the workflow continues, and secrets can be used in future steps. The latest release of "eslint-plugin-react" to the npm registry used a one-time password (OTP) from a GitHub Actions workflow! https://github.com/jsx-eslint/eslint-plugin-react/actions/ru...

Visit product View on Hacker NewsDec 6, 2022

Share card

Actual performance

72points

26comments

Made the leaderboard

Launch Intel predictions

Analyze your own launch →

Product HuntOn track for Day 1 leaderboard · Strong signals: mac, using, open · Missing: agents, macos, agent

81%81% predicted probability of success on Product Hunt, based on ML models trained on real launch data.

best fitHighest predicted score across all platforms for this description.

Indie HackersIH features products with proven revenue · Missing: supports, reddit linkedin, podcasting

48%48% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.

Hacker NewsMay not resonate with HN audience · Strong signals: pipe, io · Missing: https docs, excited, just released

41%41% predicted probability of success on Hacker News, based on ML models trained on real launch data.

nativeThis product was originally launched on this platform.

TrustMRRLess likely to generate early MRR · Missing: mobile apps, ios, personal

33%33% predicted probability of success on TrustMRR, based on ML models trained on real launch data.

AppSumoMay struggle as an AppSumo deal · Missing: plus, platform, intuitive

26%26% predicted probability of success on AppSumo, based on ML models trained on real launch data.

Acquire.comPre-revenue stage for this audience · Missing: arr, mrr, revenue

15%15% predicted probability of success on Acquire.com, based on ML models trained on real launch data.

BetaListMay not resonate with beta-testers · Missing: web3, chat, crypto

2%2% predicted probability of success on BetaList, based on ML models trained on real launch data.

Incorrect prediction on native model

Similar products

DSAuth – Passwordless authentication using ECDSA50%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

DSAuth – Passwordless authentication using ECDSA

Hacker News1

HN Karma Tracker Using GitHub Actions22%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

HN Karma Tracker Using GitHub Actions

Hacker News1

GitHub Actions for Pixela23%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

GitHub Actions for Pixela

Hacker News2

Sticky Disks in GitHub Actions31%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Sticky Disks in GitHub Actions

Hacker News13

Butler – GitHub Actions Oversight Across Organisations23%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Butler – GitHub Actions Oversight Across Organisations

Hacker News2

SSH Authentication Using GitHub Teams68%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

SSH Authentication Using GitHub Teams

Hacker News4

How to Have a GitHub Oauth Authentication for SPA Without Server58%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

How to Have a GitHub Oauth Authentication for SPA Without Server

Hacker News3

GitHub Actions for Agents33%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

GitHub Actions for Agents

Hacker News3

AuthShield40%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Unified Multi-Factor Authentication

Product Hunt+5

Satellizer – Authentication for AngularJS46%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Satellizer – Authentication for AngularJS

Hacker News221

Browse all products Analyze your launch