From 1361217de75cc8371771756ca376b1fe507a1f23 Mon Sep 17 00:00:00 2001
From: frami <i@2fd.me>
Date: Tue, 2 Apr 2024 21:55:33 -0300
Subject: [PATCH] fix: enabled provenance for npm

---
 .github/workflows/release.yml | 6 ++++--
 README.md                     | 2 +-
 jsr.json                      | 1 +
 package.json                  | 5 ++++-
 4 files changed, 10 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f9f0658..135954d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -140,8 +140,10 @@ jobs:
     runs-on: ubuntu-20.04
 
     permissions:
-      contents: write
-      id-token: write # The OIDC ID token is used for authentication with JSR.
+      contents: write # to be able to publish a GitHub release
+      issues: write # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
+      id-token: write # to enable use of OIDC for npm provenance
 
     needs:
       - test_node
diff --git a/README.md b/README.md
index 2a76fac..7605a5c 100644
--- a/README.md
+++ b/README.md
@@ -3,7 +3,7 @@
 A dependency-free WebAssembly build of [Rust Regex](https://docs.rs/regex/latest/regex/) for Javascript
 
 ![GitHub Actions Workflow Status](https://img.shields.io/github/actions/workflow/status/2fd/rregex/release.yml?branch=master) ![GitHub Release](https://img.shields.io/github/v/release/2fd/rregex) ![NPM Version](https://img.shields.io/npm/v/rregex)
-![JSR Version](https://img.shields.io/jsr/v/%40rregex/rregex)
+ [![JSR](https://jsr.io/badges/@rregex/rregex)](https://jsr.io/@rregex/rregex)
 
 > Note: this project is not intended to be used in production jet
 
diff --git a/jsr.json b/jsr.json
index af00925..11ef192 100644
--- a/jsr.json
+++ b/jsr.json
@@ -1,6 +1,7 @@
 {
   "name": "@rregex/rregex",
   "version": "0.0.0-development",
+  "description": "A dependency-free WebAssembly build of Rust Regex for Javascript",
   "exports": "./lib/esm.mjs",
   "publish": {
     "include": [
diff --git a/package.json b/package.json
index 9a3b029..28f42e4 100644
--- a/package.json
+++ b/package.json
@@ -1,13 +1,16 @@
 {
   "name": "rregex",
   "version": "0.0.0-development",
-  "description": "Rust Regex binding for Javascript",
+  "description": "A dependency-free WebAssembly build of Rust Regex for Javascript",
   "private": false,
   "type": "module",
   "main": "./lib/commonjs.cjs",
   "module": "./lib/esm.mjs",
   "browser": "./lib/web.js",
   "types": "./lib/types.d.ts",
+  "publishConfig": {
+    "provenance": true
+  },
   "devDependencies": {
     "@semantic-release/exec": "^6.0.3",
     "concurrently": "^8.2.2",