From b2c5bb120677d9331cc801c67898f2c890fd31d1 Mon Sep 17 00:00:00 2001
From: Remco Haszing <remcohaszing@gmail.com>
Date: Sat, 19 Aug 2023 14:42:15 +0200
Subject: [PATCH] Enable npm provenance

---
 .github/workflows/ci.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index b0ef788..b85ba00 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -70,6 +70,8 @@ jobs:
     runs-on: ubuntu-latest
     needs: [eslint, examples, pack, prettier, tsc]
     if: startsWith(github.ref, 'refs/tags/')
+    permissions:
+      id-token: write
     steps:
       - uses: actions/setup-node@v3
         with:
@@ -77,6 +79,6 @@ jobs:
           registry-url: https://registry.npmjs.org
       - uses: actions/download-artifact@v3
         with: { name: package }
-      - run: npm publish *.tgz
+      - run: npm publish *.tgz --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}