mirror of
https://github.com/theoludwig/html-w3c-validator.git
synced 2024-12-08 00:45:37 +01:00
feat: add npm package provenance
Ref: https://github.blog/2023-04-19-introducing-npm-package-provenance/
This commit is contained in:
parent
e818556c5b
commit
3d24ffe971
8
.github/workflows/release.yml
vendored
8
.github/workflows/release.yml
vendored
@ -7,6 +7,11 @@ on:
|
||||
jobs:
|
||||
release:
|
||||
runs-on: 'ubuntu-latest'
|
||||
permissions:
|
||||
contents: 'write'
|
||||
issues: 'write'
|
||||
pull-requests: 'write'
|
||||
id-token: 'write'
|
||||
steps:
|
||||
- uses: 'actions/checkout@v3.5.2'
|
||||
with:
|
||||
@ -27,6 +32,9 @@ jobs:
|
||||
|
||||
- run: 'npm run build:typescript'
|
||||
|
||||
- name: 'Verify the integrity of provenance attestations and registry signatures for installed dependencies'
|
||||
run: 'npm audit signatures'
|
||||
|
||||
- name: 'Release'
|
||||
run: 'npm run release'
|
||||
env:
|
||||
|
10
package.json
10
package.json
@ -22,13 +22,17 @@
|
||||
],
|
||||
"main": "build/index.js",
|
||||
"bin": "build/index.js",
|
||||
"files": [
|
||||
"build"
|
||||
],
|
||||
"publishConfig": {
|
||||
"access": "public",
|
||||
"provenance": true
|
||||
},
|
||||
"engines": {
|
||||
"node": ">=16.0.0",
|
||||
"npm": ">=9.0.0"
|
||||
},
|
||||
"files": [
|
||||
"build"
|
||||
],
|
||||
"scripts": {
|
||||
"build": "rimraf ./build && swc ./src --out-dir ./build",
|
||||
"build:typescript": "tsc",
|
||||
|
Loading…
Reference in New Issue
Block a user