Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

build: Add provenence flag when publishing jsapi-types #5204

Merged
merged 1 commit into from
Mar 6, 2024
Merged

build: Add provenence flag when publishing jsapi-types #5204

merged 1 commit into from
Mar 6, 2024

Commits on Feb 28, 2024

  1. build: Add provenence flag when publishing jsapi-types 

    - .npmrc file is not getting used with how we publish (building the tarball first and then publishing from a different directory)
- Adding the --provenance flag should generate the provenance statements automatically: https://docs.npmjs.com/generating-provenance-statements#publishing-packages-with-provenance-via-github-actions
- This _should_ work even publishing from the tarball, as the provenance info is generated after the tarball is created: https://github.com/npm/provenance?tab=readme-ov-file#demo-generating-signed-slsa-provenance
    @mofojed
    mofojed committed Feb 28, 2024
    Configuration menu
    Copy the full SHA
    bb4e3ca View commit details
    Browse the repository at this point in the history