From 528bacbdbc929e97ca190ed23b720e2ae308e540 Mon Sep 17 00:00:00 2001
From: v1rtl <hi@v1rtl.site>
Date: Fri, 19 Jul 2024 15:04:30 +0300
Subject: [PATCH] setup provenance

---
 .github/workflows/publish.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index bcb13e5a..6dc7c2a2 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -7,6 +7,8 @@ on:
 jobs:
   publish:
     name: Publish
+    permissions:
+      id-token: write
     runs-on: ubuntu-latest
     strategy:
       matrix:
@@ -42,6 +44,7 @@ jobs:
       - name: Publish
         env:
           NPM_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
         run: |
           pnpm config set //registry.npmjs.org/:_authToken=${NPM_AUTH_TOKEN}
           pnpm -F @ensdomains/ensjs publish