devops: use --provenance when publishing to NPM (#83)

Similar to how we do it upstream:
e2c8163b14/utils/publish_all_packages.sh (L97)

Reference: https://docs.npmjs.com/generating-provenance-statements
This commit is contained in:
Max Schmitt 2025-03-29 19:17:54 +01:00 committed by GitHub
parent af522dca5f
commit 88fbf50841
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -15,6 +15,6 @@ jobs:
- run: npm run build - run: npm run build
- run: npm run lint - run: npm run lint
- run: npm run test - run: npm run test
- run: npm publish - run: npm publish --provenance
env: env:
NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}} NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}