From 7ae46214268eac649114e992038e4bc2a98c6c56 Mon Sep 17 00:00:00 2001 From: Simen Bekkhus Date: Mon, 19 Jun 2023 10:30:29 +0200 Subject: [PATCH] chore: enable npm provenance (#1383) --- .github/workflows/nodejs.yml | 7 ++++--- package.json | 3 +++ 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index ac1a7873a..44ac03d25 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -135,9 +135,10 @@ jobs: release: permissions: - contents: write # for semantic-release - issues: write # to create comment - pull-requests: write # to create comment + contents: write # to be able to publish a GitHub release + issues: write # to be able to comment on released issues + pull-requests: write # to be able to comment on released pull requests + id-token: write # to enable use of OIDC for npm provenance if: # prettier-ignore diff --git a/package.json b/package.json index 463e98e5f..b96a883c1 100644 --- a/package.json +++ b/package.json @@ -158,5 +158,8 @@ "packageManager": "yarn@3.6.0", "engines": { "node": "^14.15.0 || ^16.10.0 || >=18.0.0" + }, + "publishConfig": { + "provenance": true } }