Merge pull request #461 from dwightjack/ci/provenance

CI: add provenance statements
dwightjack · May 2, 2024 · 3252c35 · 3252c35
2 parents feaaf74 + 45d4c11
commit 3252c35
Show file tree

Hide file tree

Showing 5 changed files with 30 additions and 1 deletion.
diff --git a/.changeset/chilly-roses-peel.md b/.changeset/chilly-roses-peel.md
@@ -0,0 +1,6 @@
+---
+"vue-types": patch
+"vue-types-nuxt": patch
+---
+
+Include provenance statements to the package
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -7,6 +7,14 @@ on:
 
 concurrency: ${{ github.workflow }}-${{ github.ref }}
 
+permissions:
+  id-token: write
+  contents: read
+  pull-requests: write
+
+env:
+  NPM_CONFIG_PROVENANCE: true
+
 jobs:
   build_and_release:
     runs-on: ubuntu-latest

diff --git a/.github/workflows/snapshot-release.yml b/.github/workflows/snapshot-release.yml
@@ -5,6 +5,15 @@ on:
     types: [labeled]
 concurrency: ${{ github.workflow }}-${{ github.ref }}
 
+permissions:
+  id-token: write
+  contents: read
+  pull-requests: write
+  issues: write
+
+env:
+  NPM_CONFIG_PROVENANCE: true
+
 jobs:
   release:
     if: |

diff --git a/packages/core/package.json b/packages/core/package.json
@@ -58,7 +58,8 @@
   ],
   "repository": {
     "type": "git",
-    "url": "https://github.com/dwightjack/vue-types.git"
+    "url": "https://github.com/dwightjack/vue-types.git",
+    "directory": "packages/core"
   },
   "bugs": "https://github.com/dwightjack/vue-types/issues",
   "peerDependencies": {

diff --git a/packages/nuxt/package.json b/packages/nuxt/package.json
@@ -12,6 +12,11 @@
   "engines": {
     "node": ">=16.0.0"
   },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/dwightjack/vue-types.git",
+    "directory": "packages/nuxt"
+  },
   "main": "./dist/module.cjs",
   "types": "./dist/types.d.ts",
   "files": [