Generate provenance statements when publishing (#220)

simple-icons · Dec 21, 2024 · bc27367 · bc27367
1 parent 08658d6
commit bc27367
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -9,6 +9,8 @@ jobs:
   npm:
     name: NPM Package
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -34,6 +36,7 @@ jobs:
         uses: JS-DevTools/npm-publish@v3
         with:
           token: ${{ secrets.NPM_TOKEN }}
+          provenance: true
   github:
     name: GitHub release
     runs-on: ubuntu-latest