From f9293396238e4c227da3f30f88af89b858fcb5e7 Mon Sep 17 00:00:00 2001
From: Vladyslav Zubko <42296182+what1s1ove@users.noreply.github.com>
Date: Thu, 20 Jun 2024 11:24:44 +0300
Subject: [PATCH] fix: add provenance statement to npm publish fp-136 (#143)

* fix: add provenance statement to npm publish fp-136

* fix: add id permissiono to npm publish fp-136
---
 .github/workflows/cd.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 9739eb6..e7a0cec 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -91,6 +91,8 @@ jobs:
     name: NPM Publish
     needs: build
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - name: Code Checkout
         uses: actions/checkout@v4
@@ -109,7 +111,7 @@ jobs:
 
       - name: Publish
         working-directory: ${{ env.ARTIFACT_PATH }}
-        run: npm publish
+        run: npm publish --provenance --access public
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}