add debug to list npm

AEnguerrand · Dec 4, 2024 · 6f9c9ae · 6f9c9ae
1 parent fcb6e99
commit 6f9c9ae
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/.github/workflows/slsa-generator-nodejs-custom.yaml b/.github/workflows/slsa-generator-nodejs-custom.yaml
@@ -77,13 +77,21 @@ jobs:
           slsa-layout-file: artifacts-layout.json
           predicate-type: https://slsa.dev/provenance/v0.2
           predicate-file: predicate.json
-          output-folder: toto
+          output-folder: attestations
       - name: Sign the attestation
         uses: slsa-framework/slsa-github-generator/.github/actions/[email protected]
         with:
           payload-type: application/vnd.in-toto+json
           attestations: attestations
-          output-folder: attestations-signed          
+          output-folder: attestations-signed 
+      - run: ls -Rla
+      - name: Upload to npmjs.com
+        env:
+          TARBALL_PATH: ${{ steps.package-details.outputs.PACKAGE_FILENAME }}
+          PROVENANCE_PATH: "./attestations/${{ needs.build.outputs.provenance-download-name }}/${{ needs.build.outputs.provenance-name }}"
+        run: |
+          npm config set //registry.npmjs.org/:_authToken "${{ secrets.NPM_TOKEN }}"
+          npm publish "${TARBALL_PATH}" --access public --provenance-file="${PROVENANCE_PATH}"