ci(cd): publish to github packages with provenance

Fdawgs · Jan 17, 2024 · db56d80 · db56d80
1 parent 535691e
commit db56d80
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
@@ -64,6 +64,7 @@ jobs:
         runs-on: ubuntu-latest
         permissions:
             contents: read
+            id-token: write
             packages: write
         steps:
             - name: Check out repo
@@ -89,4 +90,4 @@ jobs:
               # Remove dev values from package.json before publishing to reduce package size
               run: |
                   npm pkg delete commitlint devDependencies jest scripts
-                  npm publish --ignore-scripts
+                  npm publish --access public --ignore-scripts --provenance