Merge pull request #263 from db-ui/262-introduce-built-and-signed-on-…

…github-actions feat: generating provenance statements
db-ui · Sep 16, 2024 · dbd7522 · dbd7522
2 parents e6dcfc6 + 8093259
commit dbd7522
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/.github/workflows/02-publish.yml b/.github/workflows/02-publish.yml
@@ -34,4 +34,4 @@ jobs:
           npm version --no-git-tag-version "$SEMVER_VERSION"
           npm config set registry https://registry.npmjs.org/
           npm set //registry.npmjs.org/:_authToken "$NPM_TOKEN"
-          npm publish
+          npm publish --provenance
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -27,3 +27,5 @@ jobs:
     uses: ./.github/workflows/02-publish.yml
     needs: [build, lint, test]
     secrets: inherit
+    permissions:
+      id-token: write