ci: publish with provenance

JianJroh · May 30, 2023 · 2223ae3 · 2223ae3
1 parent 8fdc909
commit 2223ae3
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
@@ -9,7 +9,6 @@ jobs:
   npm-publish:
     runs-on: ubuntu-latest
     permissions:
-      contents: read
       id-token: write
     steps:
       - uses: actions/checkout@v3
@@ -36,4 +35,5 @@ jobs:
       - name: Publish to NPM
         env:
           NODE_AUTH_TOKEN: ${{secrets.NPM_AUTH_TOKEN }}
-        run: pnpm publish --access public --no-git-checks
+          NPM_CONFIG_PROVENANCE: true
+        run: pnpm publish  --access public --no-git-checks