feat: add npm provenance (#373)

netlify · Apr 24, 2023 · 9d798de · 9d798de
1 parent 29f8a89
commit 9d798de
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 3 deletions.
diff --git a/.github/workflows/github-packages-releaser.yml b/.github/workflows/github-packages-releaser.yml
@@ -6,6 +6,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     permissions:
+      id-token: write
       contents: read
       packages: write
     steps:
@@ -15,6 +16,6 @@ jobs:
           node-version: '16.x'
           registry-url: 'https://npm.pkg.github.com'
       - run: npm ci
-      - run: npm publish
+      - run: npm publish --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
@@ -6,6 +6,10 @@ on:
 jobs:
   release-please:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: write
+      pull-requests: write
     steps:
       - uses: navikt/github-app-token-generator@a3831f44404199df32d8f39f7c0ad9bb8fa18b1c
         id: get-token
@@ -32,7 +36,7 @@ jobs:
         with:
           deno-version: v1.x
         if: ${{ steps.release.outputs.release_created }}
-      - run: npm publish
+      - run: npm publish --provenance
         if: ${{ steps.release.outputs.release_created }}
         env:
           NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
diff --git a/package.json b/package.json
@@ -42,7 +42,7 @@
   },
   "keywords": [],
   "license": "MIT",
-  "repository": "netlify/edge-bundler",
+  "repository": "https://github.com/netlify/edge-bundler",
   "bugs": {
     "url": "https://github.com/netlify/edge-bundler/issues"
   },