Merge pull request #33 from jasonkarns/npm-provenance

try publishing with provenance
jasonkarns · May 14, 2024 · 4bf7239 · 4bf7239
2 parents 5ad58fc + 9f83b50
commit 4bf7239
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -19,11 +19,12 @@ jobs:
 
   npm:
     runs-on: ubuntu-latest
+    permissions: { id-token: write }
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
           registry-url: 'https://registry.npmjs.org'
-      - run: npm publish
+      - run: npm publish --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPMJS_TOKEN }}