Merge pull request mozilla#18352 from wojtekmaj/provenance

Generate provenance statements on npm publish
timvandermeij · Jul 1, 2024 · 7114796 · 7114796
2 parents 067ec20 + aaa65bf
commit 7114796
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/publish_release.yml b/.github/workflows/publish_release.yml
@@ -4,6 +4,7 @@ on:
     types: [published]
 permissions:
   contents: read
+  id-token: write
 
 jobs:
   publish:
@@ -33,6 +34,6 @@ jobs:
         run: npx gulp dist
 
       - name: Publish the `pdfjs-dist` library to NPM
-        run: npm publish ./build/dist
+        run: npm publish ./build/dist --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}