npm registry with provenance

rosen-score · May 9, 2024 · 76af43a · 76af43a
1 parent 213076b
commit 76af43a
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -9,6 +9,9 @@ on:
 jobs:
     build:
         runs-on: ubuntu-latest
+        permissions:
+            contents: read
+            id-token: write
         steps:
             - uses: actions/checkout@v4
             # Setup .npmrc file to publish to npm