.env.example

# Environment used to build and release the CLI.
#
# Copy to .env and fill in what you need; .env is gitignored, .env.example is not.
# The build scripts load .env automatically, but a value already exported in the
# environment always wins - CI secrets are never shadowed by a stray local file.


# --- Analytics -------------------------------------------------------------
# Measurement Protocol api secret, paired with the measurement id in
# scripts/set-ga-id.js. Create one under
#   GA4 Admin -> Data Streams -> <stream> -> Measurement Protocol API secrets
#
# Deliberately not committed: this repository is public, so a committed secret
# would make every contributor's `npm run pack.release` report into the
# production property. Leave it unset locally - builds then report nothing.
#
# Set as the GA_API_SECRET repository secret for releases.
GA_API_SECRET=

# Same, for the dev measurement id. Unused until a dev id is set in
# scripts/set-ga-id.js.
GA_API_SECRET_DEV=


# --- Publishing ------------------------------------------------------------
# Only needed when the USE_NPM_TOKEN repository variable is "true". The default
# path is OIDC trusted publishing, which needs no token at all.
NPM_PUBLISH_TOKEN=

# Used by the OpenSSF Scorecard workflow to read branch protection rules.
SCORECARD_TOKEN=

# GITHUB_TOKEN is provided by Actions automatically and never needs setting here.