ci: add NPM packages provenance (#799)

lagonapp · Apr 25, 2023 · af3d21f · af3d21f
1 parent b931b92
commit af3d21f
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/.changeset/few-gifts-confess.md b/.changeset/few-gifts-confess.md
@@ -0,0 +1,7 @@
+---
+'@lagon/cli': patch
+'@lagon/astro': patch
+'@lagon/remix': patch
+---
+
+Add NPM packages provenance
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -12,6 +12,7 @@ env:
 jobs:
   release:
     name: Release
+    permissions: write-all
     runs-on: ubuntu-20.04
     steps:
       - uses: actions/checkout@v3
@@ -35,3 +36,4 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.PAT }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true