Add npm provenance on publish

EngageSoftware · Apr 20, 2023 · 3881703 · 3881703
1 parent 825f384
commit 3881703
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
@@ -19,6 +19,7 @@
 		"publish-npm": {
 			"needs": "build",
 			"runs-on": "ubuntu-latest",
+			"permissions": { "id-token": "write" },
 			"steps": [
 				{ "uses": "actions/[email protected]" },
 				{
@@ -30,7 +31,7 @@
 				},
 				{ "run": "npm ci" },
 				{
-					"run": "npm publish",
+					"run": "npm publish --provenance",
 					"env": {
 						"NODE_AUTH_TOKEN": "${{secrets.npm_token}}"
 					}