ci: enable provenance

recap-utr · Nov 3, 2023 · 840ad02 · 840ad02
1 parent fcdc2c0
commit 840ad02
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -7,6 +7,8 @@ on:
 jobs:
   test:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - uses: actions/checkout@v4
       - uses: DeterminateSystems/nix-installer-action@v6
@@ -32,6 +34,9 @@ jobs:
     needs: test
     runs-on: ubuntu-latest
     if: ${{ github.repository_owner == 'recap-utr' && github.event_name == 'push' }}
+    permissions:
+      contents: write
+      id-token: write
     steps:
       - uses: actions/checkout@v4
       - uses: DeterminateSystems/nix-installer-action@v6

diff --git a/package.json b/package.json
@@ -30,5 +30,9 @@
   "files": [
     "dist"
   ],
-  "exports": "./dist/index.js"
+  "exports": "./dist/index.js",
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  }
 }