From 8bfec3d3b7b9438a1400eeacd5d052e61c0a1b2b Mon Sep 17 00:00:00 2001
From: LitoMore <LitoMore@users.noreply.github.com>
Date: Fri, 27 Dec 2024 14:31:43 +0800
Subject: [PATCH] Generate provenance statements when publishing (#237)

---
 .github/workflows/release.yml | 2 ++
 package.json                  | 1 +
 2 files changed, 3 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b2892e66..01e48e4f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -19,6 +19,8 @@ jobs:
   publish-npm:
     name: Release
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v3
         with:
diff --git a/package.json b/package.json
index a755f9a9..d4cf006f 100644
--- a/package.json
+++ b/package.json
@@ -108,6 +108,7 @@
 		"react": "^16.13 || ^17 || ^18 || ^19"
 	},
 	"publishConfig": {
+    "provenance": true,
 		"access": "public"
 	}
 }