Updated provenance permissions in CI

iwoplaza · Dec 18, 2024 · e603c0a · e603c0a
1 parent 1ec540c
commit e603c0a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/.github/workflows/publish-to-npm.yml b/.github/workflows/publish-to-npm.yml
@@ -8,6 +8,9 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v4
 
@@ -26,7 +29,7 @@ jobs:
       - name: Install dependencies
         run: pnpm install --recursive --frozen-lockfile
 
-      - run: pnpm publish-package
+      - run: pnpm publish-package -- --provenance --access public
         working-directory: ./packages/typed-binary
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
diff --git a/scripts/publish-to-npm.mjs b/scripts/publish-to-npm.mjs
@@ -70,7 +70,6 @@ Release channel: ${colors.Cyan}${channel ?? '<LATEST>'}${colors.Reset}
   try {
     await promiseSpawn('pnpm', [
       'publish',
-      '--provenance',
       ...(channel ? ['--tag', channel] : []),
       ...args._,
     ]);