Merge pull request #575 from Fdawgs/ci/sig

Fdawgs · Apr 4, 2024 · c3bb1a9 · c3bb1a9
2 parents 0369669 + dc9d91d
commit c3bb1a9
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
@@ -47,6 +47,7 @@ jobs:
             - name: Setup Node
               uses: actions/setup-node@v4
               with:
+                  check-latest: true
                   node-version: lts/*
                   registry-url: https://registry.npmjs.org
 
@@ -80,6 +81,7 @@ jobs:
             - name: Setup Node
               uses: actions/setup-node@v4
               with:
+                  check-latest: true
                   node-version: lts/*
                   registry-url: https://npm.pkg.github.com
                   scope: "@fdawgs"

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -55,11 +55,15 @@ jobs:
             - name: Setup Node
               uses: actions/setup-node@v4
               with:
+                  check-latest: true
                   node-version: lts/*
 
             - name: Install
               run: npm i --ignore-scripts
 
+            - name: Audit NPM package signatures and provenance attestations
+              run: npm audit signatures
+
             - name: Run ESLint
               run: npm run lint
 
@@ -107,6 +111,7 @@ jobs:
             - name: Setup Node ${{ matrix.node-version }}
               uses: actions/setup-node@v4
               with:
+                  check-latest: true
                   node-version: ${{ matrix.node-version }}
 
             - name: Install