ci(release): enforce npm provenance #4

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Merged

cezaraugusto merged 1 commit into main from chore/npm-provenance

Oct 7, 2025

Member

cezaraugusto commented Oct 7, 2025

Use single-package publish (drop -r)
Keep --provenance and set NPM_CONFIG_PROVENANCE=true
Ensure id-token: write and NODE_AUTH_TOKEN mapping

Merging will make npm show the provenance panel reliably.


          ci(release): enforce npm provenance (single-package publish, NPM_CONF…

7ccda72

…IG_PROVENANCE)

cezaraugusto merged commit 8bacb87 into main

1 check passed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet