chore(workflow): add npm provenance to npm package

iTowns · Oct 11, 2023 · cb29ab6 · cb29ab6
1 parent 5143c25
commit cb29ab6
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
@@ -141,6 +141,8 @@ jobs:
     if: ${{ github.ref == 'refs/heads/master' }}
     needs: [unit-and-coverage-tests, functional-tests, check-commit-message]
     runs-on: ubuntu-latest
+    permissions:
+        id-token: write
     steps:
 
       - uses: actions/checkout@v3

diff --git a/package.json b/package.json
@@ -29,8 +29,8 @@
     "watch": "cross-env BABEL_DISABLE_CACHE=1 babel --watch src --out-dir lib",
     "changelog": "conventional-changelog -n ./config/conventionalChangelog/config.js -i changelog.md -s",
     "bump": "if [ -z $npm_config_level ]; then grunt bump:minor;  else grunt bump:$npm_config_level; fi && npm run changelog && git add -A && git commit --amend --no-edit",
-    "publish-next": "npm version prerelease --preid next && npm publish --access public --tag=next",
-    "publish-latest": "npm publish --access public --tag=latest"
+    "publish-next": "npm version prerelease --preid next && npm publish --access public --tag=next --provenance",
+    "publish-latest": "npm publish --access public --tag=latest --provenance"
   },
   "nyc": {
     "exclude": [