Merge pull request #72 from shopware/enable-provenance

Enable provenance
shopware · May 15, 2023 · 8407c2a · 8407c2a
2 parents 1f45783 + fc25acb
commit 8407c2a
Showing 1 changed file with 9 additions and 5 deletions.
diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
@@ -6,15 +6,18 @@ jobs:
   publish:
     if: github.ref == 'refs/heads/main'
     runs-on: ubuntu-latest
+    permissions:
+     contents: read
+     id-token: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
       - name: Setup Node.js
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@v3
         with:
           node-version: 'lts/gallium'
       - name: Retrieve the cached "node_modules" directory (if present)
-        uses: actions/cache@v2
+        uses: actions/cache@v3
         id: node-cache
         with:
           path: node_modules
@@ -26,7 +29,8 @@ jobs:
         run: npm run lint
       - name: build
         run: npm run build
-      - uses: JS-DevTools/npm-publish@v1
+      - uses: JS-DevTools/npm-publish@v2
         with:
           token: ${{ secrets.NPM_TOKEN }}
-          access: "public"
+          access: "public"
+          provenance: true