Add npm package provenance

sibiraj-s · sibiraj-s · commit c4a7ae0bd08b · 2023-07-01T18:57:44.000+05:30
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -15,6 +15,10 @@ jobs:
       name: npm
       url: https://npm.im/html-minifier-terser
 
+    permissions:
+      contents: read
+      id-token: write
+
     steps:
       - name: Checkout
         uses: actions/checkout@v3
@@ -38,6 +42,6 @@ jobs:
       - name: Run Tests
         run: npm run test
 
-      - run: npm publish
+      - run: npm publish --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
