We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 8552d3e commit b0d02eeCopy full SHA for b0d02ee
1 file changed
.github/workflows/npm-publish.yml
@@ -8,6 +8,10 @@ jobs:
8
publish-npm:
9
name: Publish to npm Registry
10
runs-on: ubuntu-latest
11
+ permissions:
12
+ id-token: write
13
+ contents: read
14
+ attestations: write
15
steps:
16
- name: Checkout repository
17
uses: actions/checkout@v4
@@ -27,7 +31,7 @@ jobs:
27
31
28
32
- name: Publish package to npm
29
33
if: github.repository_owner == 'brahma-dev'
30
- run: npm publish --access public
34
+ run: npm publish --access public --provenance
35
env:
36
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
37
@@ -48,6 +52,6 @@ jobs:
48
52
'
49
53
50
54
- name: Publish to GitHub Packages
51
- run: npm publish
55
56
57
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
0 commit comments