Add GitHub provenance for publishing (#345)

dcousens · web-flow · commit 942db499b1d8 · 2023-12-28T16:24:20.000+01:00
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -3,6 +3,9 @@ name: Release
 on:
   workflow_dispatch:
 
+permissions:
+  id-token: write
+
 jobs:
   publish:
     name: Publish package to NPM
@@ -27,3 +30,4 @@ jobs:
         run: npm publish
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
