search

tailwindlabs / tailwindcss-forms

A plugin that provides a basic reset for form styles that makes form elements easy to override with utilities.
https://tailwindcss-forms.vercel.app
MIT License
4.15k stars 219 forks source link

ci: add provenance to insider packages #154

Closed saibotk closed 5 months ago

saibotk commented 6 months ago

This commit adds provenance for insider packages. See the NPM documentation 0.

Note: This will only affect the insiders build, because the normal package is sadly not being built within a workflow. Should we add that too here or rather in another PR/later?

Provenance will allow people to verify that the packages were actually built on GH Actions and with the content of the corresponding commit. This will help with supply chain security.

For this to work, the id-token permission was added only where necessary.

vercel[bot] commented 6 months ago

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
tailwindcss-forms ✅ Ready (Inspect) Visit Preview 💬 Add feedback Mar 6, 2024 1:33am
reinink commented 5 months ago

Thanks!!

reinink commented 5 months ago

Oh and feel free to submit a subsequent PR to add a standard release workflow 👍