feat: 2fa on publish (#8)

Author: sheplu

.github/workflows/npm-release.yaml

@@ -0,0 +1,14 @@
+name: Publish package
+on:
+  release:
+    types: [created]
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  publish:
+    uses: expressjs/ci-workflows/.github/workflows/publish.yaml@release-reusable-action
+    secrets:
+      NPM_PUBLISH: ${{ secrets.NPM_PUBLISH }} 

.github/workflows/pr-audit.yaml

@@ -0,0 +1,11 @@
+name: Audit PR
+on:
+  push:
+
+permissions:
+    id-token: write
+    contents: read
+
+jobs:
+  tests:
+    uses: expressjs/ci-workflows/.github/workflows/tests.yaml@release-reusable-action

.github/workflows/publish.yaml

@@ -4,7 +4,8 @@
   "description": "Demo of a secure setup to automatically publish on npm",
   "main": "index.js",
   "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
+    "test": "echo test",
+    "lint": "echo lint"
   },
   "repository": {
     "type": "git",