Merge pull request #6 from codeql-agent-project/adapt-slsa

fix: update latest npm to support provenance

Author: vovikhangcdv

.github/workflows/npm-publish.yml

@@ -28,6 +28,8 @@ jobs:
         with:
           node-version: 16
           registry-url: https://registry.npmjs.org/
+      - name: Install latest npm
+        run: npm install -g npm@latest
       - run: npm ci
       - run: npm publish --provenance
         env: