fix provenance (#443)

decentraland · Jun 13, 2023 · 1f232b5 · 1f232b5
1 parent 8c29f89
commit 1f232b5
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml
@@ -10,6 +10,9 @@ name: Publish NPM package
 jobs:
   install:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@master
       - name: Use Node.js 18.x
@@ -29,6 +32,7 @@ jobs:
         uses: menduz/oddish-action@master
         with:
           cwd: ./dist
+          provenance: true
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: report coverage