Merge pull request #756 from balancer/fix-workflow-provenance

Fix workflow provenance and write access

Author: Bruno

.github/workflows/release.yml

@@ -6,7 +6,7 @@ on:
 
 permissions:
   id-token: write  # Required for OIDC
-  contents: read
+  contents: write  # Required for pushing git tags
 
 jobs:
   release:
@@ -31,4 +31,5 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
 

package.json

@@ -27,7 +27,7 @@
         "test": "vitest dev",
         "test:ci": "vitest run",
         "changeset": "changeset",
-        "changeset:release": "pnpm build && changeset publish",
+        "changeset:release": "pnpm build && changeset publish --provenance",
         "example": "npx tsx ./examples/lib/executeExample.ts",
         "update:deployments": "npx tsx ./scripts/updateDeployments.ts && pnpm format"
     },