Skip to content

Commit a1e874d

Browse files
authored
chore: add npm provenance (#46)
Update release.yml
1 parent 5d930b7 commit a1e874d

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

.github/workflows/release.yml

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,10 @@ on:
55
types:
66
- published
77

8+
permissions:
9+
id-token: write
10+
contents: read
11+
812
jobs:
913
release:
1014
if: startsWith(github.ref, 'refs/tags/v')
@@ -29,4 +33,4 @@ jobs:
2933
echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > .npmrc
3034
VERSION=${GITHUB_REF#refs/tags/v}
3135
npm version $VERSION --no-git-tag-version
32-
npm publish --access public
36+
npm publish --provenance --access public

0 commit comments

Comments
 (0)