chore: add provenance

zenpaul · May 16, 2023 · a6b72ba · a6b72ba
1 parent 451df0a
commit a6b72ba
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -20,6 +20,7 @@ jobs:
     permissions:
       pull-requests: write
       contents: write
+      id-token: write
     runs-on: ubuntu-latest
     steps:
       - uses: nearform-actions/optic-release-automation-action@v4
@@ -28,6 +29,7 @@ jobs:
           npm-token: ${{ secrets[format('NPM_TOKEN_{0}', github.actor)] || secrets.NPM_TOKEN }}
           optic-token: ${{ secrets[format('OPTIC_TOKEN_{0}', github.actor)] || secrets.OPTIC_TOKEN }}
           semver: ${{ github.event.inputs.semver }}
+          provenance: true
           build-command: |
             npm install