ci: generate provenance statements when release (#18)

eslint · Jul 21, 2023 · 914a02e · 914a02e
1 parent b25c563
commit 914a02e
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
@@ -9,6 +9,7 @@ jobs:
  permissions:
  contents: write
  pull-requests: write
+ id-token: write
  steps:
  - uses: google-github-actions/release-please-action@v3
  id: release
@@ -35,7 +36,7 @@ jobs:
  node-version: lts/*
  registry-url: https://registry.npmjs.org
  if: ${{ steps.release.outputs.release_created }}
- - run: npm publish
+ - run: npm publish --provenance
  env:
  NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
  if: ${{ steps.release.outputs.release_created }}