Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(ci): enable provenance #13799

Merged
merged 1 commit into from
Aug 7, 2023
Merged

feat(ci): enable provenance #13799

merged 1 commit into from
Aug 7, 2023

Conversation

btea
Copy link
Collaborator

@btea btea commented Aug 1, 2023

Please make sure these boxes are checked before submitting your PR, thank you!

  • Make sure you follow contributing guide English | (中文 | Español | Français).
  • Make sure you are merging your commits to dev branch.
  • Add some descriptions and refer to relative issues for your PR.

Description

Just try the nightly release first.

🤖 Generated by Copilot at 003f38e

This pull request enhances the security and reliability of the nightly npm package publishing process by using the --provenance flag and setting minimum permissions for the GitHub Actions token. It also updates npm to the latest version in the .github/workflows/publish-npm-nightly.yml file.

Related Issue

Fixes #___.

Explanation of Changes

🤖 Generated by Copilot at 003f38e

  • Add permissions field to publish job to specify minimum token access (link)
  • Update npm to latest version before publishing to enable --provenance flag (link)
  • Use --provenance flag to generate and verify cryptographic proof of origin for package (link)

@github-actions
Copy link

github-actions bot commented Aug 1, 2023

@github-actions github-actions bot added the CommitMessage::Qualified Qualified commit message label Aug 1, 2023
@github-actions
Copy link

github-actions bot commented Aug 1, 2023

🧪 Playground Preview: https://element-plus.run/?pr=13799
Please comment the example via this playground if needed.

@btea btea merged commit b4927b0 into dev Aug 7, 2023
13 checks passed
@btea btea deleted the feat/npm-provenance branch August 7, 2023 11:31
@element-bot element-bot mentioned this pull request Aug 25, 2023
3 tasks
laizuan pushed a commit to laizuan/element-plus that referenced this pull request Sep 5, 2023
consultation-applio pushed a commit to consultation-applio/element-plus that referenced this pull request Nov 10, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
CommitMessage::Qualified Qualified commit message
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants