feat: add npm provenance to releases

belgattitude · Jan 6, 2024 · 28687e1 · 28687e1
1 parent e1e85de
commit 28687e1
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/.changeset/lemon-tools-sit.md b/.changeset/lemon-tools-sit.md
@@ -0,0 +1,9 @@
+---
+"prisma-exception": patch
+"@httpx/assert": patch
+"@httpx/dsn-parser": patch
+"@httpx/exception": patch
+"@httpx/json-api": patch
+---
+
+Release with npm provenance
diff --git a/.github/workflows/release-or-version-pr.yml b/.github/workflows/release-or-version-pr.yml
@@ -15,6 +15,7 @@ jobs:
     permissions:
       contents: write  #  to create release (changesets/action)
       pull-requests: write
+      id-token: write # to allow npm provenance
     runs-on: ubuntu-latest
     env:
       NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN }}