build: enable package provenance

lirantal · May 12, 2023 · 9e741ce · 9e741ce
1 parent 6ace554
commit 9e741ce
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -22,6 +22,11 @@ jobs:
 
   release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # to be able to publish a GitHub release
+      issues: write # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
+      id-token: write # to enable use of OIDC for npm provenance
     if: github.event_name == 'push' && github.ref == 'refs/heads/master'
     steps:
       - uses: actions/checkout@v3

diff --git a/package.json b/package.json
@@ -21,6 +21,10 @@
     "email": "liran.tal@gmail.com",
     "url": "https://github.com/lirantal"
   },
+  "publishConfig": {
+    "provenance": true,
+    "access": "public"
+  },
   "license": "Apache-2.0",
   "keywords": [
     "cypress",