From cb29ab68848e0c7ec27862be5dd672052bb44b9d Mon Sep 17 00:00:00 2001 From: Vincent JAILLOT Date: Tue, 10 Oct 2023 15:50:29 +0200 Subject: [PATCH] chore(workflow): add npm provenance to npm package --- .github/workflows/integration.yml | 2 ++ package.json | 4 ++-- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml index 92273b3d54..bfcf243945 100644 --- a/.github/workflows/integration.yml +++ b/.github/workflows/integration.yml @@ -141,6 +141,8 @@ jobs: if: ${{ github.ref == 'refs/heads/master' }} needs: [unit-and-coverage-tests, functional-tests, check-commit-message] runs-on: ubuntu-latest + permissions: + id-token: write steps: - uses: actions/checkout@v3 diff --git a/package.json b/package.json index 88401b3b51..35c0eb2503 100644 --- a/package.json +++ b/package.json @@ -29,8 +29,8 @@ "watch": "cross-env BABEL_DISABLE_CACHE=1 babel --watch src --out-dir lib", "changelog": "conventional-changelog -n ./config/conventionalChangelog/config.js -i changelog.md -s", "bump": "if [ -z $npm_config_level ]; then grunt bump:minor; else grunt bump:$npm_config_level; fi && npm run changelog && git add -A && git commit --amend --no-edit", - "publish-next": "npm version prerelease --preid next && npm publish --access public --tag=next", - "publish-latest": "npm publish --access public --tag=latest" + "publish-next": "npm version prerelease --preid next && npm publish --access public --tag=next --provenance", + "publish-latest": "npm publish --access public --tag=latest --provenance" }, "nyc": { "exclude": [