Add provenance to NPM publish during release cycle (#5644)

2025-04-21 16:53:38 -06:00
parent aaf955de56
commit 3a14bcc783
1 changed files with 1 additions and 1 deletions
--- a/scripts/release/workflow/publish.sh
+++ b/scripts/release/workflow/publish.sh
@ -9,7 +9,7 @@ PACKAGE_JSON_VERSION="$(tar xfO "$TARBALL" package/package.json | jq -r .version
 echo "//registry.npmjs.org/:_authToken=\${NPM_TOKEN}" > .npmrc

 # Actual publish
-npm publish "$TARBALL" --tag "$TAG"
+npm publish --provenance "$TARBALL" --tag "$TAG"

 # Clean up tags
 delete_tag() {