Fix: Use npm publish provenance

doteric · May 29, 2023 · 2c89d49 · 2c89d49
1 parent 8e26fed
commit 2c89d49
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -7,6 +7,8 @@ on:
 jobs:
   build_and_publish:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     environment: npm
     steps:
       - uses: actions/checkout@v3
@@ -19,6 +21,6 @@ jobs:
           npm version ${{ github.event.release.tag_name }}
           npm ci
           npm run compile
-          npm publish
+          npm publish --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}