ci(github): Add Provenance Publishing

https://docs.npmjs.com/generating-provenance-statements
FlorianWendelborn · May 7, 2023 · b8faa4f · b8faa4f
1 parent f0b9123
commit b8faa4f
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 3 deletions.
diff --git a/.github/workflows/pipeline.yml b/.github/workflows/pipeline.yml
@@ -28,4 +28,4 @@ jobs:
         run: yarn run build
 
       - name: dry-publish
-        run: npm publish --dry-run
+        run: npm publish --provenance --dry-run
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -8,6 +8,9 @@ jobs:
   build:
     runs-on: ubuntu-latest
 
+    permissions:
+      id-token: write
+
     steps:
       - uses: actions/checkout@v3
 
@@ -24,6 +27,6 @@ jobs:
 
       - run: yarn run build
 
-      - run: npm publish
+      - run: npm publish --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
diff --git a/package.json b/package.json
@@ -34,5 +34,5 @@
 		"test": "vitest"
 	},
 	"types": "dist/index.d.ts",
-	"version": "0.0.4"
+	"version": "0.0.5"
 }