search

tailwindlabs / heroicons

A set of free MIT-licensed high-quality SVG icons for UI development.
https://heroicons.com
MIT License
21.03k stars 1.27k forks source link

ci: add provenance to published packages #1145

Closed saibotk closed 3 months ago

saibotk commented 3 months ago

This commit adds provenance for all published packages. See the NPM documentation 0.

Provenance will allow people to verify that the packages were actually built on GH Actions and with the content of the corresponding commit. This will help with supply chain security.

For this to work, the id-token permission was added only where necessary. Additionally, the repository link was added to the package.json for this to work.

reinink commented 3 months ago

Thanks!!