From f9f3be8ff7156853e59438a3386a456ca5a06597 Mon Sep 17 00:00:00 2001
From: dim-0 <1191898+dim-0@users.noreply.github.com>
Date: Wed, 29 May 2024 19:29:20 +0200
Subject: [PATCH] chore(ci): Publish with Provenance (#3305)

Added configurations to package.json and the CI workflow, so that the GitHub Actions Workflow and semantic-release generate provenance information for this package (see https://github.com/semantic-release/npm#npm-provenance).
---
 .github/workflows/tests.yml | 1 +
 package.json                | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 9612b5beaf..8dfbaebd6b 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -55,6 +55,7 @@ jobs:
   Release:
     permissions:
       contents: write
+      id-token: write
     needs: [UnitTests, OtherTests]
     if: |
       github.ref == 'refs/heads/master' &&
diff --git a/package.json b/package.json
index 3c60ecfa3c..dc8b93def6 100644
--- a/package.json
+++ b/package.json
@@ -33,6 +33,9 @@
     "./marked.min.js": "./marked.min.js",
     "./package.json": "./package.json"
   },
+  "publishConfig": {
+    "provenance": true
+  },
   "repository": "git://github.com/markedjs/marked.git",
   "homepage": "https://marked.js.org",
   "bugs": {