Beanz/pdf.js
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Generate provenance statements on npm publish

Browse Source 
This PR adds [Provenance statements](https://docs.npmjs.com/generating-provenance-statements) on `npm publish`, increasing supply-chain security.
This commit is contained in:
Wojciech Maj 2024-07-01 13:16:16 +02:00
parent b5d554e1b4
commit aaa65bf3fc
No known key found for this signature in database
GPG Key ID: 2BAFB575E3D38592
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
.github/workflows/publish_release.yml vendored
View File

@ -4,6 +4,7 @@ on:
types: [published] types: [published]
permissions: permissions:
contents: read contents: read
id-token: write
jobs: jobs:
publish: publish:
@ -33,6 +34,6 @@ jobs:
run: npx gulp dist run: npx gulp dist
- name: Publish the `pdfjs-dist` library to NPM - name: Publish the `pdfjs-dist` library to NPM
run: npm publish ./build/dist run: npm publish ./build/dist --provenance
env: env:
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}