Enable provenance on releases

Moustafaa91 · Jul 23, 2024 · f10d3ed · f10d3ed
1 parent 699aa36
commit f10d3ed
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -6,6 +6,9 @@ on:
 
 jobs:
   stable:
+    permissions:
+      contents: read
+      id-token: write
     uses: the-guild-org/shared-config/.github/workflows/release-stable.yml@main
     if: ${{ github.event.pull_request.title != 'Upcoming Release Changes' }}
     with:

diff --git a/.npmrc b/.npmrc
@@ -1 +1,2 @@
 enable-pre-post-scripts=true
+provenance=true