Add provenance to publish-dev-release-react-transition-presence workflow

mediamonks · Jun 30, 2023 · b353009 · b353009
1 parent 0cb90ac
commit b353009
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/.github/workflows/publish-dev-release-react-transition-presence.yml b/.github/workflows/publish-dev-release-react-transition-presence.yml
@@ -9,6 +9,10 @@ on:
 jobs:
   bump-version:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+
     steps:
       - name: Check out source
         uses: actions/checkout@v3
@@ -43,6 +47,6 @@ jobs:
       - name: Publish
         run: |
           npm config set //registry.npmjs.org/:_authToken $NPM_TOKEN
-          npm publish -w packages/react-transition-presence --tag next
+          npm publish -w packages/react-transition-presence --tag next --provenance
         env:
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}