From 3571fc57b9a430988606b21448488c3e3ebf25f0 Mon Sep 17 00:00:00 2001
From: Cloyd Lau <31238760+cloydlau@users.noreply.github.com>
Date: Wed, 9 Oct 2024 15:37:22 +0800
Subject: [PATCH] workflow: add provenance to npm publish

---
 scripts/release.mts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/release.mts b/scripts/release.mts
index d6b5f31..256d927 100644
--- a/scripts/release.mts
+++ b/scripts/release.mts
@@ -151,7 +151,7 @@ async function release() {
   }
 
   console.log(cyan('Publishing to npm...'))
-  if (spawn.sync('npm', ['publish', '--registry=https://registry.npmjs.org'], { stdio: 'inherit' }).status === 1) {
+  if (spawn.sync('npm', ['publish', '--registry=https://registry.npmjs.org', '--provenance'], { stdio: 'inherit' }).status === 1) {
     return
   }