[v4] Add provenance to all published packages (#13160)

* Add provenance to all packages

Based on #13097 by @saibotk

Add [provenance](https://docs.npmjs.com/generating-provenance-statements) for all published packages.

---
Co-authored-by: saibotk <git@saibotk.de>

* Document reason for id-token permission

* Update changelog
This commit is contained in:
Kris Braun 2024-03-08 15:30:13 -05:00 • committed by GitHub
parent 277e2cdd4c
commit 065bbd3c99
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
17 changed files with 128 additions and 5 deletions

View file

@ -150,6 +150,11 @@ jobs:
timeout-minutes: 15
name: Build and release Tailwind CSS
permissions:
contents: read
# https://docs.npmjs.com/generating-provenance-statements#publishing-packages-with-provenance-via-github-actions
id-token: write
needs:
- build