Change Request: Publish packages with provenance - Githubissues

eslint / rewrite

Monorepo for the new version of ESLint

Apache License 2.0

65 stars 4 forks source link

Change Request: Publish packages with provenance #76

Open nzakas opened 3 days ago

nzakas commented 3 days ago

Which packages would you like to change?

[X] @eslint/compat
[X] @eslint/config-array
[X] @eslint/core
[X] @eslint/migrate-config
[X] @eslint/object-schema

What problem do you want to solve?

Our packages are not being published with provenance on npm (JSR automatically has provenance enabled).

What do you think is the correct solution?

Set up release-please to generate provenance for each package.

https://docs.npmjs.com/generating-provenance-statements?ref=blog.lsantos.dev#example-github-actions-workflow

Participation

[ ] I am willing to submit a pull request for this change.

Additional comments

No response

amareshsm commented 3 days ago

I haven't worked with prevenance before, but I'd like to give it a try.

nzakas commented 3 days ago

Go ahead and give it a try. :+1: