From 91eae117edc21e20bfd885b80a0dc2a75eb08b58 Mon Sep 17 00:00:00 2001 From: Matt Travi Date: Tue, 21 Mar 2023 22:12:37 -0500 Subject: [PATCH] ci(release): enabled provenance for publishing to npm --- .github/workflows/release.yml | 9 +++++---- package.json | 3 ++- 2 files changed, 7 insertions(+), 5 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 07fa209c..65a621a9 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -7,13 +7,14 @@ name: Release - beta - "*.x" permissions: - contents: read # for checkout + contents: read # for checkout jobs: release: permissions: - contents: write # to be able to publish a GitHub release - issues: write # to be able to comment on released issues - pull-requests: write # to be able to comment on released pull requests + contents: write # to be able to publish a GitHub release + issues: write # to be able to comment on released issues + pull-requests: write # to be able to comment on released pull requests + id-token: write # to enable use of OIDC for npm provenance name: release runs-on: ubuntu-latest steps: diff --git a/package.json b/package.json index 7fa32c70..679d8fac 100644 --- a/package.json +++ b/package.json @@ -117,7 +117,8 @@ "trailingComma": "es5" }, "publishConfig": { - "access": "public" + "access": "public", + "provenance": true }, "repository": { "type": "git",