enable provenance in npm

See https://docs.npmjs.com/generating-provenance-statements\#publishing-packages-with-provenance-via-github-actions
elastic · Mar 26, 2024 · 4d844d7 · 4d844d7
1 parent 72f6467
commit 4d844d7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -115,7 +115,7 @@ jobs:
         if: startsWith(github.ref, 'refs/tags')
         run: |-
           echo "//registry.npmjs.org/:_authToken=${{ env.NPMJS_TOKEN }}" > .npmrc
-          npm publish --otp=${{ env.TOTP_CODE }}
+          npm publish --otp=${{ env.TOTP_CODE }} --provenance
 
       - if: ${{ always() && startsWith(github.ref, 'refs/tags') }}
         uses: elastic/apm-pipeline-library/.github/actions/notify-build-status@current