chore: publish with provenance

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
CycloneDX · May 8, 2024 · ca93bf5 · ca93bf5
1 parent ffde815
commit ca93bf5
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -105,7 +105,11 @@ jobs:
         env:
           NPMJS_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: publish to NPMJS as "${{ env.NPMJS_RELEASE_TAG }}"
-        run: npm publish --access public --tag "$NPMJS_RELEASE_TAG"
+        run: >
+          npm publish
+          --provenance
+          --access public
+          --tag "$NPMJS_RELEASE_TAG"
       - name: pack release result
         run: |
           mkdir -p "$PACKED_DIR"