Build: publish provenance attestations

gordonmleigh · Oct 4, 2024 · 18c38c0 · 18c38c0
1 parent 3e1949c
commit 18c38c0
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -5,7 +5,9 @@ on:
       - main
 
 permissions:
+  attestations: write
   contents: write
+  id-token: write
   issues: write
   pull-requests: write
 
@@ -49,3 +51,4 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true