From 339f6015468ea4703fe0541b581dc08f7e2e9583 Mon Sep 17 00:00:00 2001 From: Matthias Date: Wed, 26 Apr 2023 10:26:21 +0200 Subject: [PATCH] ci(npm): add provenance configuration --- .github/workflows/release.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index fa1c2cf57..bd214b51a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -10,6 +10,7 @@ jobs: release: name: Release runs-on: ubuntu-latest + permissions: write-all steps: - uses: actions/checkout@v3.5.2 - name: Git Identity @@ -18,7 +19,7 @@ jobs: git config --global user.email 'github@scaleway.com' git remote set-url origin https://x-access-token:${GITHUB_TOKEN}@github.com/$GITHUB_REPOSITORY env: - GITHUB_TOKEN: ${{ secrets.GH_TOKEN }} + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - uses: pnpm/action-setup@v2.2.4 - name: Use Node.js uses: actions/setup-node@v3.6.0 @@ -36,3 +37,4 @@ jobs: env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} NPM_TOKEN: ${{ secrets.NPM_TOKEN }} + NPM_CONFIG_PROVENANCE: true