Add GitHub provenance for publishing (#345)

JedWatson · Dec 28, 2023 · 942db49 · 942db49
1 parent 28ea73f
commit 942db49
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -3,6 +3,9 @@ name: Release
 on:
   workflow_dispatch:
 
+permissions:
+  id-token: write
+
 jobs:
   publish:
     name: Publish package to NPM
@@ -27,3 +30,4 @@ jobs:
         run: npm publish
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true