chore: publish to npm with --provenance (#520)

Co-authored-by: Antoine du Hamel <duhamelantoine1995@gmail.com>
nodejs · Jul 12, 2024 · 1828961 · 1828961
1 parent 932bd4e
commit 1828961
Showing 1 changed file with 6 additions and 5 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -44,14 +44,15 @@ jobs:
           restore-keys: |
             ${{runner.os}}-yarn-
 
+      - run: corepack yarn install --immutable
+
+      - run: corepack yarn pack --out corepack.tgz
+
       - name: Publish to the npm registry
-        run: |
-          corepack yarn install --immutable
-          corepack yarn npm publish
+        run: npm publish corepack.tgz --provenance
         env:
-          YARN_NPM_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
+          NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
 
-      - run: corepack yarn pack --out corepack.tgz
       - name: Add Corepack package archive to GitHub release
         run: gh release upload ${{ needs.release-please.outputs.release_tag }} corepack.tgz
         env: