NPM Provenance

FDMediagroep · Apr 21, 2023 · f2c4cd0 · f2c4cd0
1 parent cf7b0cf
commit f2c4cd0
Showing 1 changed file with 8 additions and 6 deletions.
diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
@@ -11,6 +11,8 @@ env:
 
 jobs:
   build:
+    permissions:
+      id-token: write
     runs-on: ubuntu-latest
     strategy:
       matrix:
@@ -35,13 +37,13 @@ jobs:
         run: npm run build --if-present
       - name: Publish NPMJS @fdmg
         if: contains(github.ref, 'canary') == false
-        run: npm publish ./dist
+        run: npm publish --provenance ./dist
         env:
           NODE_AUTH_TOKEN: ${{secrets.npm_token}}
         continue-on-error: true
       - name: Publish NPMJS @fdmg (canary)
         if: contains(github.ref, 'canary')
-        run: npm publish ./dist --tag next
+        run: npm publish --provenance ./dist --tag next
         env:
           NODE_AUTH_TOKEN: ${{secrets.npm_token}}
         continue-on-error: true
@@ -50,13 +52,13 @@ jobs:
         run: cp ./dist/package.github.json ./dist/package.json
       - name: Publish NPMJS @fdmediagroep
         if: contains(github.ref, 'canary') == false
-        run: npm publish ./dist
+        run: npm publish --provenance ./dist
         env:
           NODE_AUTH_TOKEN: ${{secrets.npm_token}}
         continue-on-error: true
       - name: Publish NPMJS @fdmediagroep (canary)
         if: contains(github.ref, 'canary')
-        run: npm publish ./dist --tag next
+        run: npm publish --provenance ./dist --tag next
         env:
           NODE_AUTH_TOKEN: ${{secrets.npm_token}}
         continue-on-error: true
@@ -70,13 +72,13 @@ jobs:
           NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: Publish GPR
         if: contains(github.ref, 'canary') == false
-        run: npm publish ./dist
+        run: npm publish --provenance ./dist
         env:
           NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         continue-on-error: true
       - name: Publish GPR (canary)
         if: contains(github.ref, 'canary')
-        run: npm publish ./dist --tag next
+        run: npm publish --provenance ./dist --tag next
         env:
           NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         continue-on-error: true