From 13ffe4e92e254e47d9c271c965c1cb9a66eaffb1 Mon Sep 17 00:00:00 2001
From: Sebastian Pekarek <mail@sebbo.net>
Date: Sat, 21 Oct 2023 18:05:53 +0200
Subject: [PATCH] build: Enable npm provenance

https://docs.npmjs.com/generating-provenance-statements#about-npm-provenance
---
 .github/workflows/test-release.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.github/workflows/test-release.yml b/.github/workflows/test-release.yml
index 4a239c446..dfb10b2ed 100644
--- a/.github/workflows/test-release.yml
+++ b/.github/workflows/test-release.yml
@@ -67,6 +67,11 @@ jobs:
     name: Release
     runs-on: ubuntu-latest
     concurrency: release
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
+      id-token: write
     needs:
       - coverage
       - tests
@@ -91,6 +96,7 @@ jobs:
           GH_TOKEN: ${{ secrets.GH_TOKEN }}
           GH_OWNER: ${{ github.repository_owner }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
       - name: 🔃 Merge main back into develop
         if: ${{ github.ref == 'refs/heads/main' }}
         uses: everlytic/branch-merge@1.1.5