ci(publish): workaround provenance bug

vitejs · Nov 15, 2023 · 123751d · 123751d
1 parent 2b4e793
commit 123751d
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/scripts/publishCI.ts b/scripts/publishCI.ts
@@ -1,3 +1,8 @@
 import { publish } from '@vitejs/release-scripts'
 
-publish({ defaultPackage: 'vite', provenance: true, packageManager: 'pnpm' })
+// Check the tag passed in CI, and skip provenance if tag has `@` due to
+// https://github.com/slsa-framework/slsa-github-generator/pull/2758 not released
+const tag = process.argv.slice(2)[0] ?? ''
+const provenance = tag.includes('@') ? false : true
+
+publish({ defaultPackage: 'vite', provenance, packageManager: 'pnpm' })