ci: add npm provenance

lifinance · Aug 8, 2024 · c51889c · c51889c
1 parent 0048f08
commit c51889c
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
@@ -28,6 +28,9 @@ jobs:
           prerelease: false
 
   publish:
+    permissions:
+      contents: write
+      id-token: write
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
@@ -41,3 +44,4 @@ jobs:
           ${{ contains(github.ref_name, 'alpha') && '--tag alpha' || contains(github.ref_name, 'beta') && '--tag beta' || '' }}
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true