fix: add provenance for published packages (#16)

Brightspace · Dec 20, 2023 · f3ac3d0 · f3ac3d0
1 parent 44bba21
commit f3ac3d0
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -10,6 +10,7 @@ env:
   FORCE_COLOR: 3
 permissions:
   contents: read
+  id-token: write
 jobs:
   release:
     name: Release

diff --git a/package.json b/package.json
@@ -10,7 +10,8 @@
     "./reporters/mocha.js": "./src/reporters/mocha.cjs"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "scripts": {
     "license-check": "d2l-license-checker -p",