From db56d808e523c0b746db6fd077842f69740cdf90 Mon Sep 17 00:00:00 2001
From: Frazer Smith <frazer.dev@outlook.com>
Date: Wed, 17 Jan 2024 07:01:00 +0000
Subject: [PATCH] ci(cd): publish to github packages with provenance

---
 .github/workflows/cd.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index e446886..0a875a7 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -64,6 +64,7 @@ jobs:
         runs-on: ubuntu-latest
         permissions:
             contents: read
+            id-token: write
             packages: write
         steps:
             - name: Check out repo
@@ -89,4 +90,4 @@ jobs:
               # Remove dev values from package.json before publishing to reduce package size
               run: |
                   npm pkg delete commitlint devDependencies jest scripts
-                  npm publish --ignore-scripts
+                  npm publish --access public --ignore-scripts --provenance