Explorar o código

ci: publish with npm provenance

三咲智子 Kevin Deng %!s(int64=2) %!d(string=hai) anos
pai
achega
91997bb3b3
Modificáronse 1 ficheiros con 4 adicións e 0 borrados
  1. 4 0
      .github/workflows/ci.yml

+ 4 - 0
.github/workflows/ci.yml

@@ -70,6 +70,9 @@ jobs:
       !contains(github.event.head_commit.message, 'skip release')
     runs-on: ubuntu-latest
     needs: [unit-test, lint-and-test-dts]
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v4
 
@@ -88,6 +91,7 @@ jobs:
       - run: pnpm release --vapor --skip-tests
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: 'true'
 
   # benchmarks:
   #   runs-on: ubuntu-latest