From 7f96bd610dc5c72bbb43a167dd19e95a8cd5844b Mon Sep 17 00:00:00 2001
From: Brian DeHamer <bdehamer@github.com>
Date: Mon, 26 Feb 2024 10:42:33 -0800
Subject: [PATCH] publish npm packages with build provenance

Signed-off-by: Brian DeHamer <bdehamer@github.com>
---
 .github/workflows/releases.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/releases.yml b/.github/workflows/releases.yml
index e63d8185..5e70163e 100644
--- a/.github/workflows/releases.yml
+++ b/.github/workflows/releases.yml
@@ -62,7 +62,7 @@ jobs:
           NPM_TOKEN: ${{ secrets.TOKEN }}
 
       - name: publish
-        run: npm publish *.tgz
+        run: npm publish --provenance *.tgz
 
       - name: notify slack on failure
         if: failure()