From 10ee7a37b0ed09ec1abb12ed993d0386efa322f4 Mon Sep 17 00:00:00 2001 From: Collins Date: Mon, 14 Oct 2024 10:23:06 +0300 Subject: [PATCH] Fix NPM provenance (#592) --- .github/workflows/publish.yml | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index effb9804..d2fdfea5 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -86,9 +86,6 @@ jobs: pnpm run install-deps pnpm nx-test-skip-cache - - name: Enable NPM PROVENANCE - run: echo "NPM_CONFIG_PROVENANCE=true" >> $GITHUB_ENV - - name: Publish to NPM id: changesets uses: changesets/action@3de3850952bec538fde60aac71731376e57b9b57 # v1.4.8 @@ -100,6 +97,7 @@ jobs: env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} NPM_TOKEN: ${{ secrets.NPM_TOKEN }} + NPM_CONFIG_PROVENANCE: true - name: Generate SBOM uses: anchore/sbom-action@d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5