Merge pull request #1674 from actions/npm-provenance

publish npm packages with build provenance
actions · Feb 26, 2024 · 9e5eb95 · 9e5eb95
2 parents 8f53a1d + 7f96bd6
commit 9e5eb95
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/releases.yml b/.github/workflows/releases.yml
@@ -62,7 +62,7 @@ jobs:
           NPM_TOKEN: ${{ secrets.TOKEN }}
 
       - name: publish
-        run: npm publish *.tgz
+        run: npm publish --provenance *.tgz
 
       - name: notify slack on failure
         if: failure()