feat: generating provenance statements

db-ux-design-system · Sep 16, 2024 · 8093259 · 8093259
1 parent e6dcfc6
commit 8093259
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/.github/workflows/02-publish.yml b/.github/workflows/02-publish.yml
@@ -34,4 +34,4 @@ jobs:
           npm version --no-git-tag-version "$SEMVER_VERSION"
           npm config set registry https://registry.npmjs.org/
           npm set //registry.npmjs.org/:_authToken "$NPM_TOKEN"
-          npm publish
+          npm publish --provenance
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -27,3 +27,5 @@ jobs:
     uses: ./.github/workflows/02-publish.yml
     needs: [build, lint, test]
     secrets: inherit
+    permissions:
+      id-token: write