ci: Add provenance to the publish JS GitHub actions

mofojed · Jul 17, 2024 · caa99e3 · caa99e3
1 parent 5ae1fb1
commit caa99e3
Show file tree

Hide file tree

Showing 6 changed files with 5,043 additions and 4,895 deletions.
diff --git a/.github/workflows/publish-alpha.yml b/.github/workflows/publish-alpha.yml
@@ -16,6 +16,7 @@ jobs:
     permissions:
       contents: read
       packages: write
+      id-token: write
     steps:
       - uses: actions/checkout@v3
         with:

diff --git a/.github/workflows/publish-packages.yml b/.github/workflows/publish-packages.yml
@@ -9,6 +9,7 @@ jobs:
     permissions:
       contents: read
       packages: write
+      id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@v3

diff --git a/.npmrc b/.npmrc
@@ -0,0 +1 @@
+provenance=true
diff --git a/lerna.json b/lerna.json
@@ -1,7 +1,5 @@
 {
   "$schema": "node_modules/lerna/schemas/lerna-schema.json",
-  "useWorkspaces": true,
   "useNx": false,
-  "version": "independent",
-  "packages": ["plugins/*/src/js/"]
+  "version": "independent"
 }