ci: Publish with Provenance

[dim-0]

Marked version: any

Markdown flavor: GitHub Flavored Markdown

Description

Added configurations to package.json and the CI workflow, so that the GitHub Actions Workflow and semantic-release generate provenance information for this package (see https://github.com/semantic-release/npm#npm-provenance).

Expectation

marked being published with verifiable Provenance data (see https://docs.npmjs.com/generating-provenance-statements)

Result

marked package containing verifiable Provenance data

What was attempted

• Added publishing configuration to package.json
• Added ID Token permissions to GitHub Actions workflow

Contributor

• Test(s) exist to ensure functionality and minimize regression (if no tests added, list tests covering this PR); or,
• no tests required for this PR.
• If submitting new feature, it has been documented in the appropriate places.

Committer

In most cases, this should be a different person than the contributor.

• CI is green (no forced merge required).
• Squash and Merge PR following conventional commit guidelines.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
marked-website	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	May 28, 2024 10:28am

[UziTech]

Thanks! 💯