publish npm packages with build provenance

Signed-off-by: Brian DeHamer <[email protected]>
2026-08-07 00:00:18 +02:00 · 2024-02-26 10:42:33 -08:00
parent 8f53a1d37f
commit 7f96bd610d
1 changed files with 1 additions and 1 deletions
@@ -62,7 +62,7 @@ jobs:
          NPM_TOKEN: ${{ secrets.TOKEN }}

      - name: publish
-        run: npm publish *.tgz
+        run: npm publish --provenance *.tgz

      - name: notify slack on failure
        if: failure()