diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 99b9ad48..3ee90821 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -5,6 +5,10 @@ on: - main - test +permissions: + id-token: write + contents: read + jobs: build-and-release: name: 'Build project, run CI checks and publish new release' @@ -17,7 +21,7 @@ jobs: language: node language-version: 21 prepare-command: pnpm build + useTrustedPublishing: true secrets: APP_PRIVATE_KEY: ${{ secrets.APP_PRIVATE_KEY }} RUNNER_APP_PRIVATE_KEY: ${{ secrets.RUNNER_APP_PRIVATE_KEY }} - NPM_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }} diff --git a/package.json b/package.json index 825dcb9b..abfcf538 100644 --- a/package.json +++ b/package.json @@ -17,6 +17,10 @@ "type": "git", "url": "https://github.com/fingerprintjs/node-sdk" }, + "publishConfig": { + "access": "public", + "provenance": true + }, "engines": { "node": ">=18.17.0" },