chore(workflow): fix publish rights with npm provenance

iTowns · Oct 16, 2023 · 63f70be · 63f70be
1 parent cb29ab6
commit 63f70be
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
@@ -142,7 +142,11 @@ jobs:
     needs: [unit-and-coverage-tests, functional-tests, check-commit-message]
     runs-on: ubuntu-latest
     permissions:
+        # id-token: write permission is required for npm provenance:
+        # https://docs.npmjs.com/generating-provenance-statements#publishing-packages-with-provenance-via-github-actions
         id-token: write
+        # contents: write is required for git push
+        contents: write
     steps:
 
       - uses: actions/checkout@v3