Merge pull request #94 from LitoMore/npm-provenance

ci: Generate provenance statements when publishing
icons-pack · Dec 27, 2024 · 1710f98 · 1710f98
2 parents 76d48c1 + 8937465
commit 1710f98
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 3 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -13,15 +13,17 @@ on:
 jobs:
   publish-npm:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - run: echo "🎉 The job was automatically triggered by a ${{ github.event_name }} event."
       - run: echo "🐧 This job is now running on a ${{ runner.os }} server hosted by GitHub!"
       - run: echo "🔎 The name of your branch is ${{ github.ref }} and your repository is ${{ github.repository }}."
 
-      - uses: actions/checkout@v4      
+      - uses: actions/checkout@v4
 
       - name: 🔥 Setup corepack
-        run: | 
+        run: |
           corepack enable
 
       - name: Setup Node.js environment
@@ -37,7 +39,7 @@ jobs:
         env:
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}      
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: 🔥 Run generate:icons
         run: pnpm run generate:icons

diff --git a/package.json b/package.json
@@ -2,6 +2,7 @@
 	"name": "@icons-pack/svelte-simple-icons",
 	"version": "4.0.1",
 	"publishConfig": {
+		"provenance": true,
 		"access": "public"
 	},
 	"engines": {