chore: setup npm provenance attestation

This commit is contained in:
mathuo 2023-10-22 12:11:28 +01:00
parent 0f555075ae
commit dc50d4e2ac
No known key found for this signature in database
GPG Key ID: C6EEDEFD6CA07281

View File

@ -1,4 +1,7 @@
name: Publish Experimental Package to npmjs name: Publish Experimental Package to npmjs
env:
NPM_CONFIG_PROVENANCE: true
on: on:
workflow_dispatch: workflow_dispatch:
# release: # release:
@ -6,11 +9,13 @@ on:
jobs: jobs:
build: build:
runs-on: ubuntu-latest runs-on: ubuntu-latest
permissions:
id-token: write
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v4
- uses: actions/setup-node@v3 - uses: actions/setup-node@v3
with: with:
node-version: '16.x' node-version: '18.x'
registry-url: 'https://registry.npmjs.org' registry-url: 'https://registry.npmjs.org'
- uses: actions/cache@v3 - uses: actions/cache@v3
@ -23,12 +28,12 @@ jobs:
- run: yarn - run: yarn
- run: npm run set-experimental-versions - run: npm run set-experimental-versions
- name: Publish dockview-core - name: Publish dockview-core
run: npm publish --tag experimental run: npm publish --provenance --tag experimental
working-directory: packages/dockview-core working-directory: packages/dockview-core
env: env:
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
- name: Publish dockview - name: Publish dockview
run: npm publish --tag experimental run: npm publish --provenance --tag experimental
working-directory: packages/dockview working-directory: packages/dockview
env: env:
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}