Add npm package provenance

terser · Jul 1, 2023 · c4a7ae0 · c4a7ae0
1 parent dcf7690
commit c4a7ae0
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -15,6 +15,10 @@ jobs:
       name: npm
       url: https://npm.im/html-minifier-terser
 
+    permissions:
+      contents: read
+      id-token: write
+
     steps:
       - name: Checkout
         uses: actions/checkout@v3
@@ -38,6 +42,6 @@ jobs:
       - name: Run Tests
         run: npm run test
 
-      - run: npm publish
+      - run: npm publish --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}