Skip to content

Commit 6b57531

Browse files
committed
chore: add integrity verification step for npm dependencies
1 parent 69392cf commit 6b57531

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

.github/workflows/release.yaml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,6 +32,9 @@ jobs:
3232
- name: Run tests
3333
run: npm run all
3434

35+
- name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
36+
run: npm audit signatures
37+
3538
- name: Publish to npm
3639
run: |
3740
if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then

0 commit comments

Comments
 (0)