From 9cd5e9a3344059efc92c6967a04ba2bb4a6cc508 Mon Sep 17 00:00:00 2001
From: Okiki Ojo <hey@okikio.dev>
Date: Wed, 18 Mar 2026 02:36:00 -0400
Subject: [PATCH] ci: add provenance and public access to npm publish command

Signed-off-by: Okiki Ojo <hey@okikio.dev>
---
 .github/workflows/publish.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 57200e3..7089ac5 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -194,4 +194,6 @@ jobs:
         # `id-token: write`, so no NODE_AUTH_TOKEN secret is required here.
         run: |
           cd npm
-          npm publish
+          npm publish --provenance --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-- 
2.51.2