ci: enable provenance statement generation

- express-rate-limit/express-rate-limit#406
express-rate-limit · Oct 8, 2023 · 15cc614 · 15cc614
1 parent 66224e1
commit 15cc614
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -47,6 +47,8 @@ jobs:
  needs: [lint, test-library]
  if: startsWith(github.ref, 'refs/tags/v')
  runs-on: ubuntu-latest
+ permissions:
+ id-token: write
  steps:
  - name: Checkout the repository
  uses: actions/checkout@v3
@@ -57,7 +59,7 @@ jobs:
  - name: Install dependencies
  run: npm ci
  - name: Publish package to NPM
- run: npm publish
+ run: npm publish --provenance
  env:
  NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
  - name: Build package to upload to GitHub releases