ci: npm provenance

crowdin · Jun 22, 2023 · b635b80 · b635b80
1 parent 7c784b9
commit b635b80
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 2 deletions.
diff --git a/.github/workflows/build-test.yml b/.github/workflows/build-test.yml
@@ -139,7 +139,10 @@ jobs:
 
       - uses: actions/setup-node@v3
         with:
-          node-version: 16
+          node-version: 18
+
+      - name: Install the latest version of the npm CLI
+        run: npm install -g npm@latest
 
       - name: Build and install the package
         run: |

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -51,6 +51,9 @@ jobs:
   npm:
     runs-on: ubuntu-latest
     needs: assets
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v3
 
@@ -73,7 +76,10 @@ jobs:
 
       - uses: actions/setup-node@v3
         with:
-          node-version: 16
+          node-version: 18
+
+      - name: Install the latest version of the npm CLI
+        run: npm install -g npm@latest
 
       - name: Build and install the package
         run: |
@@ -88,6 +94,7 @@ jobs:
       - name: Publish the package
         uses: JS-DevTools/npm-publish@v2
         with:
+          provenance: true
           token: ${{ secrets.NPM_TOKEN }}
 
   aur: