chore: enable npm provenance

This commit is contained in:
三咲智子 Kevin Deng 2023-06-25 16:33:34 +08:00
parent fb119038e8
commit d48208ab71
No known key found for this signature in database
GPG Key ID: 69992F2250DFD93E

View File

@ -8,6 +8,10 @@ on:
jobs:
release:
runs-on: ubuntu-latest
permissions:
contents: read
id-token: write
steps:
- uses: actions/checkout@v3
with:
@ -32,6 +36,6 @@ jobs:
run: pnpm i
- name: Publish to NPM
run: pnpm -r publish --access public --no-git-checks
run: pnpm -r publish --provenance --access public --no-git-checks
env:
NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}