Generate npm provenance statements (#478)

oblador · Aug 27, 2024 · 038f436 · 038f436
1 parent c79b7c0
commit 038f436
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
@@ -8,13 +8,17 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v2
       - name: Use Node.js
         uses: actions/setup-node@v2
         with:
           node-version-file: '.node-version'
       - name: Publish
-        uses: JS-DevTools/npm-publish@v1
+        id: publish
+        uses: JS-DevTools/npm-publish@v3
         with:
           token: ${{ secrets.NPM_PUBLISH_TOKEN }}
+          provenance: true