瀏覽代碼

ci: publish with npm provenance

三咲智子 Kevin Deng 2 年之前
父節點
當前提交
91997bb3b3
共有 1 個文件被更改,包括 4 次插入0 次删除
  1. 4 0
      .github/workflows/ci.yml

+ 4 - 0
.github/workflows/ci.yml

@@ -70,6 +70,9 @@ jobs:
       !contains(github.event.head_commit.message, 'skip release')
     runs-on: ubuntu-latest
     needs: [unit-test, lint-and-test-dts]
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v4
 
@@ -88,6 +91,7 @@ jobs:
       - run: pnpm release --vapor --skip-tests
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: 'true'
 
   # benchmarks:
   #   runs-on: ubuntu-latest