chore: publish packages with provenance (carbon-design-system#3952)

lee-chase · Dec 7, 2023 · ce267b1 · ce267b1
1 parent 4be8bc2
commit ce267b1
Show file tree

Hide file tree

Showing 5 changed files with 14 additions and 3 deletions.
diff --git a/.github/workflows/release-v1.yml b/.github/workflows/release-v1.yml
@@ -8,6 +8,10 @@ on:
 jobs:
   Release_v1:
     runs-on: ubuntu-latest
+    # Recommended by npm for publishing with provenance https://docs.npmjs.com/generating-provenance-statements
+    permissions:
+      id-token: write
+      contents: write
 
     steps:
       - name: Checkout

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -10,6 +10,10 @@ on:
 jobs:
   Release:
     runs-on: ubuntu-latest
+    # Recommended by npm for publishing with provenance https://docs.npmjs.com/generating-provenance-statements
+    permissions:
+      id-token: write
+      contents: write
 
     steps:
       - name: Checkout

diff --git a/config/storybook-addon-carbon-theme/package.json b/config/storybook-addon-carbon-theme/package.json
@@ -27,7 +27,8 @@
     "carbon for ibm products"
   ],
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "scripts": {
     "clean": "rimraf dist",

diff --git a/packages/ibm-products-styles/package.json b/packages/ibm-products-styles/package.json
@@ -29,7 +29,8 @@
     "carbon for ibm products"
   ],
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "scripts": {
     "build": "run-s clean build-first build-all build-css-update-maps",

diff --git a/packages/ibm-products/package.json b/packages/ibm-products/package.json
@@ -34,7 +34,8 @@
     "carbon for ibm products"
   ],
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "provenance": true
   },
   "scripts": {
     "build": "run-s clean build-all",