publish npm packages with build provenance

Signed-off-by: Brian DeHamer <[email protected]>
Forrin · Feb 26, 2024 · 7f96bd6 · 7f96bd6
1 parent 8f53a1d
commit 7f96bd6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/releases.yml b/.github/workflows/releases.yml
@@ -62,7 +62,7 @@ jobs:
           NPM_TOKEN: ${{ secrets.TOKEN }}
 
       - name: publish
-        run: npm publish *.tgz
+        run: npm publish --provenance *.tgz
 
       - name: notify slack on failure
         if: failure()