We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 55ea8c7 commit 84ccca9Copy full SHA for 84ccca9
.github/workflows/release.yml
@@ -15,6 +15,9 @@ jobs:
15
test:
16
name: Publish to NPM
17
runs-on: ubuntu-latest
18
+ permissions:
19
+ contents: read
20
+ id-token: write
21
steps:
22
- name: Checkout
23
uses: actions/checkout@v6
@@ -34,14 +37,10 @@ jobs:
34
37
35
38
- name: Push Release
36
39
if: ${{ !github.event.release.prerelease }}
- env:
- NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
40
run: |
- npm publish --tag latest --access=public
41
+ npm publish --tag latest --access=public --provenance
42
43
- name: Push Pre-Release
44
if: ${{ github.event.release.prerelease }}
45
46
47
- npm publish --tag next --access=public
+ npm publish --tag next --access=public --provenance
0 commit comments