A RetroSearch Logo

Home - News ( United States | United Kingdom | Italy | Germany ) - Football scores

Search Query:

Showing content from https://github.com/tediousjs/tedious/commit/cf4c99bf2869709a1ba7e5154239e6ff2cd631a2 below:

enable release attestation through GitHub Actions (#1651) · tediousjs/tedious@cf4c99b · GitHub

File tree Expand file treeCollapse file tree 1 file changed

+7

-1

lines changed

Filter options

Expand file treeCollapse file tree 1 file changed

+7

-1

lines changed Original file line number Diff line number Diff line change

@@ -8,6 +8,11 @@ jobs:

8 8

release:

9 9

name: Release

10 10

runs-on: ubuntu-latest

11 +

permissions:

12 +

contents: write # to be able to publish a GitHub release

13 +

issues: write # to be able to comment on released issues

14 +

pull-requests: write # to be able to comment on released pull requests

15 +

id-token: write # to enable use of OIDC for npm provenance

11 16

steps:

12 17

- uses: actions/checkout@v4.1.7

13 18

@@ -16,7 +21,8 @@ jobs:

16 21

with:

17 22

node-version: 18

18 23

cache: 'npm'

19 - 24 +

- name: Verify the integrity of provenance attestations and registry signatures for installed dependencies

25 +

run: npm audit signatures

20 26

- name: Tag latest release

21 27

run: |

22 28

echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc

You can’t perform that action at this time.


RetroSearch is an open source project built by @garambo | Open a GitHub Issue

Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo

HTML: 3.2 | Encoding: UTF-8 | Version: 0.7.4