chore: enable npm provenance

This commit is contained in:
三咲智子 Kevin Deng 2023-06-25 16:33:34 +08:00
parent fb119038e8
commit d48208ab71
No known key found for this signature in database
GPG Key ID: 69992F2250DFD93E

View File

@ -8,6 +8,10 @@ on:
jobs: jobs:
release: release:
runs-on: ubuntu-latest runs-on: ubuntu-latest
permissions:
contents: read
id-token: write
steps: steps:
- uses: actions/checkout@v3 - uses: actions/checkout@v3
with: with:
@ -32,6 +36,6 @@ jobs:
run: pnpm i run: pnpm i
- name: Publish to NPM - name: Publish to NPM
run: pnpm -r publish --access public --no-git-checks run: pnpm -r publish --provenance --access public --no-git-checks
env: env:
NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}} NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}