integrate token permissions to fix provenance generation in release w…

…orkflow
golemcloud · Jun 11, 2024 · 6a0916f · 6a0916f
1 parent a92ef35
commit 6a0916f
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -8,6 +8,7 @@ on:
     types: [published]
 
 jobs:
+
   build:
     runs-on: ubuntu-latest
     steps:
@@ -36,6 +37,9 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     if: github.event_name == 'release' && github.event.action == 'published'
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v4
 

diff --git a/lib/package.json b/lib/package.json
@@ -4,7 +4,7 @@
 	"description": "A library that help writing Golem programs by providing higher level wrappers for Golem's runtime APIs, including functions for defining and performing operations transactionally.",
 	"readme": "../README.md",
 	"repository": {
-		"url": "https://github.com/golemcloud/golem-ts",
+		"url": "git+https://github.com/golemcloud/golem-ts.git",
 		"directory": "lib"
 	},
 	"license": "Apache-2.0",