build: generate provenance statement when publishing to npmjs (#91)

fulfillmenttools · Dec 19, 2024 · 345935a · 345935a
1 parent 7b9d1e6
commit 345935a
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -14,6 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+      id-token: write
     env:
       NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
       NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
@@ -39,7 +40,7 @@ jobs:
         run: npm run build
 
       - name: Publish npm package
-        run: npm publish --access public
+        run: npm publish --provenance --access public
 
       - name: Determine new version
         id: version