From 563fbb94c3f90bed565c60d4d483208438077c96 Mon Sep 17 00:00:00 2001
From: Tomek Zawadzki <tomekzawadzki98@gmail.com>
Date: Mon, 13 Jan 2025 09:49:39 +0100
Subject: [PATCH] Enable build with provenance for nightly

---
 .github/workflows/npm-reanimated-package-build.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/npm-reanimated-package-build.yml b/.github/workflows/npm-reanimated-package-build.yml
index fa697ad2522..25045677c65 100644
--- a/.github/workflows/npm-reanimated-package-build.yml
+++ b/.github/workflows/npm-reanimated-package-build.yml
@@ -29,6 +29,9 @@ jobs:
   build:
     if: github.repository == 'software-mansion/react-native-reanimated'
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     env:
       PACKAGE_NAME: PLACEHOLDER # Will be reassigned later on.
     steps:
@@ -87,7 +90,7 @@ jobs:
         run: mv $PACKAGE_NAME ../../
 
       - name: Publish npm package
-        run: npm publish $PACKAGE_NAME --tag nightly
+        run: npm publish $PACKAGE_NAME --tag nightly --provenance
         if: ${{ inputs.publish_on_npm }}
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN }}