From 32a04430cd6722419a80343ff5e3180f75fc472e Mon Sep 17 00:00:00 2001
From: "K.Himeno" <6715229+Himenon@users.noreply.github.com>
Date: Sun, 22 Dec 2024 11:52:47 +0900
Subject: [PATCH 1/2] chore: support provenance

---
 .github/workflows/release.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index dbb7aa1..7462527 100755
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -44,7 +44,7 @@ jobs:
       - run: pnpm install
       - run: |
           pnpm build
-          pnpm run release:github:registry
+          NPM_CONFIG_PROVENANCE=true pnpm run release:github:registry
         env:
           NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
@@ -64,6 +64,6 @@ jobs:
           cache: "pnpm"
       - run: pnpm install
       - run: pnpm build
-      - run: pnpm run release:npm:registry
+      - run: NPM_CONFIG_PROVENANCE=true pnpm run release:npm:registry
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

From f07501a1ad2d26b5152c92bb5491a3186c412017 Mon Sep 17 00:00:00 2001
From: "K.Himeno" <6715229+Himenon@users.noreply.github.com>
Date: Sun, 22 Dec 2024 11:56:08 +0900
Subject: [PATCH 2/2] chore: support provenance

---
 .github/workflows/release.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7462527..d295a8c 100755
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -4,6 +4,9 @@ on:
   release:
     types: [created]
 
+permissions:
+  id-token: write
+
 jobs:
   build:
     runs-on: ubuntu-latest