umbraco
diff --git a/Diff for: ‎.github/workflows/publish.yml
+5 b/Diff for: ‎.github/workflows/publish.yml
+5
diff --git a/Diff for: ‎.npmrc
+1 b/Diff for: ‎.npmrc
+1
@@ -24,6 +24,11 @@ jobs:
     # The type of runner that the job will run on
     runs-on: ubuntu-latest
 
+    # Environment variables available to all steps in the job to ensure provenance of the build
+    permissions:
+      contents: read
+      id-token: write
+
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
 
@@ -1 +1,2 @@
+provenance=true
 legacy-peer-deps=true
Original file line number	Diff line number	Diff line change
`@@ -1 +1,2 @@`
	`1`	`+provenance=true`
`1`	`2`	`legacy-peer-deps=true`