diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 836c32357..bbe8c5bd7 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -6,6 +6,13 @@ name: Release - next - beta - "*.x" +# These are recommended by the semantic-release docs: https://github.com/semantic-release/npm#npm-provenance +permissions: + contents: write # to be able to publish a GitHub release + issues: write # to be able to comment on released issues + pull-requests: write # to be able to comment on released pull requests + id-token: write # to enable use of OIDC for npm provenance + jobs: release: name: release diff --git a/package.json b/package.json index 4df553583..d9ee8452f 100644 --- a/package.json +++ b/package.json @@ -1,7 +1,8 @@ { "name": "@octokit/auth-token", "publishConfig": { - "access": "public" + "access": "public", + "provenance": true }, "type": "module", "version": "0.0.0-development",