Update yarn publish command with --provenance flag (#13)

* Update yarn publish command with --provenance flag * Add provenance flag to publishConfig in package.json
ImBIOS · Dec 14, 2023 · a9487be · a9487be
1 parent 6ba7595
commit a9487be
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 3 deletions.
diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
@@ -32,6 +32,6 @@ jobs:
           VERSION=$(node -p "require('./package.json').version")-canary.$(date +%s)
 
           yarn version --new-version $VERSION --no-git-tag-version
-          yarn publish --tag canary
+          yarn publish --tag canary --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
diff --git a/.github/workflows/stable-release.yml b/.github/workflows/stable-release.yml
@@ -52,7 +52,7 @@ jobs:
           git push origin $VERSION
 
           yarn version --new-version $VERSION
-          yarn publish --tag latest
+          yarn publish --tag latest --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Create GitHub Release

diff --git a/library/package.json b/library/package.json
@@ -41,7 +41,8 @@
     "dist"
   ],
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "scripts": {
     "playground": "bun ./playground.js",