ci: generate provenance statements when release (#53)

eslint · Jul 15, 2023 · 7b09698 · 7b09698
1 parent 4640146
commit 7b09698
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
@@ -9,6 +9,7 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
+      id-token: write
     steps:
       - uses: google-github-actions/release-please-action@v3
         id: release
@@ -37,7 +38,7 @@ jobs:
         if: ${{ steps.release.outputs.release_created }}
       - run: npm install
         if: ${{ steps.release.outputs.release_created }}
-      - run: npm publish
+      - run: npm publish --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         if: ${{ steps.release.outputs.release_created }}