add permissions to publish npm packages with provenance (#124)

* add permissions to publish npm packages with provenance for the reference see https://docs.npmjs.com/generating-provenance-statements#publishing-packages-with-provenance-via-github-actions * Update yml --------- Co-authored-by: Igor Octaviano <[email protected]>
ImagingDataCommons · Jun 6, 2024 · da8dfd9 · da8dfd9
1 parent 179f0fd
commit da8dfd9
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -4,6 +4,9 @@ on:
     types: [published]
 jobs:
   build:
+    permissions:
+      contents: read
+      id-token: write
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4