Add npm provenance on publish

bdukes · bdukes · commit 388170351b29 · 2023-04-20T14:14:01.000-05:00
diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
@@ -19,6 +19,7 @@
 		"publish-npm": {
 			"needs": "build",
 			"runs-on": "ubuntu-latest",
+			"permissions": { "id-token": "write" },
 			"steps": [
 				{ "uses": "actions/checkout@v3.5.2" },
 				{
@@ -30,7 +31,7 @@
 				},
 				{ "run": "npm ci" },
 				{
-					"run": "npm publish",
+					"run": "npm publish --provenance",
 					"env": {
 						"NODE_AUTH_TOKEN": "${{secrets.npm_token}}"
 					}

Original file line number	Diff line number	Diff line change
`@@ -19,6 +19,7 @@`
`19`	`19`	`"publish-npm": {`
`20`	`20`	`"needs": "build",`
`21`	`21`	`"runs-on": "ubuntu-latest",`
	`22`	`+ "permissions": { "id-token": "write" },`
`22`	`23`	`"steps": [`
`23`	`24`	`{ "uses": "actions/[email protected]" },`
`24`	`25`	`{`
`@@ -30,7 +31,7 @@`
`30`	`31`	`},`
`31`	`32`	`{ "run": "npm ci" },`
`32`	`33`	`{`
`33`		`- "run": "npm publish",`
	`34`	`+ "run": "npm publish --provenance",`
`34`	`35`	`"env": {`
`35`	`36`	`"NODE_AUTH_TOKEN": "${{secrets.npm_token}}"`
`36`	`37`	`}`