set up npm provenance

k-yle · May 9, 2024 · b90d626 · b90d626
1 parent a3cd151
commit b90d626
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -5,6 +5,8 @@ on: [push, pull_request]
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
 
     strategy:
       matrix:

diff --git a/package.json b/package.json
@@ -21,7 +21,7 @@
     "build": "tsc && rm -rf dist && mv temp/src dist && rm -rf temp",
     "lint": "eslint --ignore-path .gitignore .",
     "test": "jest",
-    "trypublish": "npm publish || true"
+    "trypublish": "npm publish --provenance || true"
   },
   "bin": {
     "pdf2img": "./bin/cli.mjs"