feat(ci): enable provenance (#13901)

This commit is contained in:
btea 2023-08-08 21:44:01 +08:00 committed by GitHub
parent c886ba44b1
commit dc6224d274
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -49,6 +49,9 @@ jobs:
publish: publish:
needs: test needs: test
runs-on: ubuntu-latest runs-on: ubuntu-latest
permissions:
contents: read
id-token: write
steps: steps:
- uses: actions/checkout@v3 - uses: actions/checkout@v3
@ -69,6 +72,9 @@ jobs:
- name: Gen npmrc - name: Gen npmrc
run: echo "//registry.npmjs.com/:_authToken=${{ secrets.NPM_PUBLISH_TOKEN }}" >> ./.npmrc run: echo "//registry.npmjs.com/:_authToken=${{ secrets.NPM_PUBLISH_TOKEN }}" >> ./.npmrc
- name: Update npm
run: npm install npm@latest -g
- name: Build&publish - name: Build&publish
run: sh ./scripts/publish.sh run: sh ./scripts/publish.sh
env: env: