ci: enable provenance statement generation

- express-rate-limit/express-rate-limit#406
express-rate-limit · Oct 8, 2023 · 15cc614 · 15cc614
1 parent 66224e1
commit 15cc614
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -47,6 +47,8 @@ jobs:
     needs: [lint, test-library]
     if: startsWith(github.ref, 'refs/tags/v')
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - name: Checkout the repository
         uses: actions/checkout@v3
@@ -57,7 +59,7 @@ jobs:
       - name: Install dependencies
         run: npm ci
       - name: Publish package to NPM
-        run: npm publish
+        run: npm publish --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
       - name: Build package to upload to GitHub releases