Generate provenance statements when publishing (#119)

simple-icons · Dec 21, 2024 · 8518d28 · 8518d28
1 parent 5ebdb6c
commit 8518d28
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -12,6 +12,7 @@ jobs:
       contents: write # to create a GitHub Release
       issues: write # to comment on issues included in a release
       pull-requests: write # to comment on Pull Requests included in a release
+      id-token: write # to generate npm provenance statements
     steps:
       - name: Checkout
         uses: actions/checkout@v4

diff --git a/package.json b/package.json
@@ -35,6 +35,9 @@
     "prepublishOnly": "rollup -c",
     "test": "mocha --timeout 10000"
   },
+  "publishConfig": {
+    "provenance": true
+  },
   "dependencies": {
     "ansi-regex": "^6.0.1",
     "chalk": "^5.0.0",