[v4] Add provenance to all published packages (#13160)
* Add provenance to all packages Based on #13097 by @saibotk Add [provenance](https://docs.npmjs.com/generating-provenance-statements) for all published packages. --- Co-authored-by: saibotk <git@saibotk.de> * Document reason for id-token permission * Update changelog
This commit is contained in:
parent
277e2cdd4c
commit
065bbd3c99
17 changed files with 128 additions and 5 deletions
5
.github/workflows/release-oxide.yml
vendored
5
.github/workflows/release-oxide.yml
vendored
|
|
@ -150,6 +150,11 @@ jobs:
|
|||
timeout-minutes: 15
|
||||
name: Build and release Tailwind CSS
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
# https://docs.npmjs.com/generating-provenance-statements#publishing-packages-with-provenance-via-github-actions
|
||||
id-token: write
|
||||
|
||||
needs:
|
||||
- build
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue