ci(publish): workaround provenance bug (#14996)

vitejs · Nov 15, 2023 · 0469bea · 0469bea
1 parent e0c86d4
commit 0469bea
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/scripts/publishCI.ts b/scripts/publishCI.ts
@@ -1,3 +1,8 @@
 import { publish } from '@vitejs/release-scripts'
 
-publish({ defaultPackage: 'vite', provenance: true, packageManager: 'pnpm' })
+// Check the tag passed in CI, and skip provenance if tag has `@` due to
+// https://github.com/slsa-framework/slsa-github-generator/pull/2758 not released
+const tag = process.argv.slice(2)[0] ?? ''
+const provenance = !tag.includes('@')
+
+publish({ defaultPackage: 'vite', provenance, packageManager: 'pnpm' })