feat: Add npm provenance

markdown-confluence · Apr 19, 2023 · ee76005 · ee76005
1 parent 8137934
commit ee76005
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 2 deletions.
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
@@ -6,6 +6,7 @@ on:
 permissions:
   contents: write
   pull-requests: write
+  id-token: write
 
 name: release-please
 
@@ -29,6 +30,10 @@ jobs:
           node-version: "16.x"
           registry-url: 'https://registry.npmjs.org'
 
+      - name: Latest NPM
+        if: ${{ steps.release-please.outputs.release_created }}
+        run: npm install -g npm@latest
+
       - name: Upload release assets
         if: ${{ steps.release-please.outputs.release_created }}
         run: |

diff --git a/packages/lib/package.json b/packages/lib/package.json
@@ -77,7 +77,8 @@
     },
     "publishConfig": {
         "access": "public",
-        "registry": "https://registry.npmjs.org/"
+        "registry": "https://registry.npmjs.org/",
+        "provenance": true
     }
 }
 
diff --git a/packages/mermaid-electron-renderer/package.json b/packages/mermaid-electron-renderer/package.json
@@ -37,6 +37,7 @@
     },
     "publishConfig": {
         "access": "public",
-        "registry": "https://registry.npmjs.org/"
+        "registry": "https://registry.npmjs.org/",
+        "provenance": true
     }
 }