From ba1670f754460856c295207923be53b1daae6cfa Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Weslley=20Ara=C3=BAjo?= <46850407+wellwelwel@users.noreply.github.com> Date: Thu, 29 Aug 2024 22:05:08 -0300 Subject: [PATCH] chore(npm): add `--provenance` to improve package transparency (#29) chore(npm): add `--provenance` to improve transparency --- .github/workflows/release-please.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index b2f7f36..e31dc28 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -7,6 +7,7 @@ on: permissions: contents: write pull-requests: write + id-token: write jobs: release-please: runs-on: ubuntu-latest @@ -53,4 +54,4 @@ jobs: if: ${{ steps.release.outputs.releases_created }} env: NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} - run: npm publish + run: npm publish --provenance