Enable npm provenance

remcohaszing · Aug 19, 2023 · b2c5bb1 · b2c5bb1
1 parent de1b756
commit b2c5bb1
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -70,13 +70,15 @@ jobs:
     runs-on: ubuntu-latest
     needs: [eslint, examples, pack, prettier, tsc]
     if: startsWith(github.ref, 'refs/tags/')
+    permissions:
+      id-token: write
     steps:
       - uses: actions/setup-node@v3
         with:
           node-version: 18
           registry-url: https://registry.npmjs.org
       - uses: actions/download-artifact@v3
         with: { name: package }
-      - run: npm publish *.tgz
+      - run: npm publish *.tgz --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}