ci: generate provenance statements (#2170)

toeverything · Apr 22, 2023 · b6cb911 · b6cb911 · vercel · Apr 22, 2023
1 parent 1c52a91
commit b6cb911
Show file tree

Hide file tree

Showing 11 changed files with 17 additions and 0 deletions.
diff --git a/.github/workflows/nightly-release.yml b/.github/workflows/nightly-release.yml
@@ -7,6 +7,9 @@ on:
     - cron: '0 0 * * *'
   workflow_dispatch:
 
+permissions:
+  id-token: write
+
 jobs:
   nightly-release:
     name: Publish npm@nightly release
@@ -50,3 +53,4 @@ jobs:
         env:
           NIGHTLY: true
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -8,6 +8,9 @@ on:
 # Pending until other workflows done
 concurrency: ${{ github.workflow }}-${{ github.ref }}
 
+permissions:
+  id-token: write
+
 jobs:
   release:
     name: Try publishing npm@latest release
@@ -45,3 +48,4 @@ jobs:
         run: ./scripts/publish.sh
         env:
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
diff --git a/packages/blocks/package.json b/packages/blocks/package.json
@@ -4,6 +4,7 @@
   "description": "Default BlockSuite editable blocks.",
   "main": "src/index.ts",
   "type": "module",
+  "repository": "toeverything/blocksuite",
   "scripts": {
     "build": "tsc",
     "test:unit": "vitest --run",

diff --git a/packages/connector/package.json b/packages/connector/package.json
@@ -4,6 +4,7 @@
   "description": "Library for creating orthogonal connectors with pathfinding support",
   "main": "src/index.ts",
   "type": "module",
+  "repository": "toeverything/blocksuite",
   "scripts": {
     "build": "tsc",
     "test:unit": "vitest --run",

diff --git a/packages/docs/package.json b/packages/docs/package.json
@@ -5,6 +5,7 @@
   "private": true,
   "keywords": [],
   "author": "toeverything",
+  "repository": "toeverything/blocksuite",
   "license": "MPL-2.0",
   "devDependencies": {
     "vitepress": "1.0.0-alpha.60"

diff --git a/packages/editor/package.json b/packages/editor/package.json
@@ -4,6 +4,7 @@
   "description": "Default BlockSuite-based editor built for AFFiNE.",
   "main": "src/index.ts",
   "type": "module",
+  "repository": "toeverything/blocksuite",
   "scripts": {
     "build": "tsc",
     "test": "echo \"Error: no test specified\" && exit 1"

diff --git a/packages/global/package.json b/packages/global/package.json
@@ -3,6 +3,7 @@
   "version": "0.5.0-alpha.3",
   "types": "./index.d.ts",
   "type": "module",
+  "repository": "toeverything/blocksuite",
   "scripts": {
     "test:unit": "vitest --run",
     "test:unit:coverage": "vitest run --coverage",

diff --git a/packages/phasor/package.json b/packages/phasor/package.json
@@ -4,6 +4,7 @@
   "description": "Hybrid canvas renderer.",
   "main": "src/index.ts",
   "type": "module",
+  "repository": "toeverything/blocksuite",
   "scripts": {
     "build": "tsc",
     "test:unit": "vitest --run",

diff --git a/packages/playground/package.json b/packages/playground/package.json
@@ -3,6 +3,7 @@
   "private": true,
   "version": "0.5.0-alpha.3",
   "type": "module",
+  "repository": "toeverything/blocksuite",
   "scripts": {
     "dev": "vite --host",
     "dev:hmr": "WC_HMR=1 vite",

diff --git a/packages/store/package.json b/packages/store/package.json
@@ -4,6 +4,7 @@
   "description": "BlockSuite data store built for general purpose state management.",
   "main": "src/index.ts",
   "type": "module",
+  "repository": "toeverything/blocksuite",
   "scripts": {
     "serve": "PORT=4444 node node_modules/y-webrtc/bin/server.js",
     "build": "tsc",

diff --git a/packages/virgo/package.json b/packages/virgo/package.json
@@ -4,6 +4,7 @@
   "description": "A micro editor.",
   "main": "src/index.ts",
   "type": "module",
+  "repository": "toeverything/blocksuite",
   "scripts": {
     "build": "tsc",
     "test:unit": "vitest --run",