From 9e741ce7950578e6e2709b647cb8aad7f8d9d0d5 Mon Sep 17 00:00:00 2001
From: Liran Tal <liran.tal@gmail.com>
Date: Fri, 12 May 2023 17:48:18 +0000
Subject: [PATCH] build: enable package provenance

---
 .github/workflows/main.yml | 5 +++++
 package.json               | 4 ++++
 2 files changed, 9 insertions(+)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index c50e5c5..a6f4abf 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -22,6 +22,11 @@ jobs:
 
   release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # to be able to publish a GitHub release
+      issues: write # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
+      id-token: write # to enable use of OIDC for npm provenance
     if: github.event_name == 'push' && github.ref == 'refs/heads/master'
     steps:
       - uses: actions/checkout@v3
diff --git a/package.json b/package.json
index 8f94b93..ad5169a 100644
--- a/package.json
+++ b/package.json
@@ -21,6 +21,10 @@
     "email": "liran.tal@gmail.com",
     "url": "https://github.com/lirantal"
   },
+  "publishConfig": {
+    "provenance": true,
+    "access": "public"
+  },
   "license": "Apache-2.0",
   "keywords": [
     "cypress",