Merge pull request #366 from Fdawgs/ci/sig

Fdawgs · Apr 4, 2024 · c601140 · c601140
2 parents 8a16660 + 172b71d
commit c601140
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
@@ -47,6 +47,7 @@ jobs:
             - name: Setup Node
               uses: actions/setup-node@v4
               with:
+                  check-latest: true
                   node-version: lts/*
                   registry-url: https://registry.npmjs.org
 
@@ -80,6 +81,7 @@ jobs:
             - name: Setup Node
               uses: actions/setup-node@v4
               with:
+                  check-latest: true
                   node-version: lts/*
                   registry-url: https://npm.pkg.github.com
                   scope: "@fdawgs"

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -55,11 +55,15 @@ jobs:
             - name: Setup Node
               uses: actions/setup-node@v4
               with:
+                  check-latest: true
                   node-version: lts/*
 
             - name: Install
               run: npm i --ignore-scripts
 
+            - name: Audit NPM package signatures and provenance attestations
+              run: npm audit signatures
+
             - name: Run ESLint
               run: npm run lint