ci(ci): audit package signatures and provenance attestations

Fdawgs · Apr 4, 2024 · 23d3ca1 · 23d3ca1
1 parent 94f3925
commit 23d3ca1
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -60,6 +60,9 @@ jobs:
             - name: Install
               run: npm i --ignore-scripts
 
+            - name: Audit NPM package signatures and provenance attestations
+              run: npm audit signatures
+
             - name: Run ESLint
               run: npm run lint