set up npm provenance

k-yle · May 9, 2024 · e955adf · e955adf
1 parent 33ba809
commit e955adf
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -5,6 +5,8 @@ on: [push]
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
 
     strategy:
       matrix:

diff --git a/package.json b/package.json
@@ -24,7 +24,7 @@
     "build": "tsc && uglifyjs -cmo dist/index.js dist/index.js",
     "lint": "eslint --ext .js,.ts,.jsx,.tsx --ignore-path .gitignore .",
     "test": "vitest",
-    "trypublish": "npm publish || true"
+    "trypublish": "npm publish --provenance || true"
   },
   "peerDependencies": {
     "react": "^16.9.0 || ^17.0.0 || ^18.0.0"