chore: enable npm provenance #63

	name: CI
	on:
	push:
	branches:
	- main

	permissions:
	contents: write # for checkout and publishing a GitHub release
	id-token: write # for generating NPM provenance

	jobs:
	release:
	name: CI
	runs-on: ubuntu-latest
	steps:
	- name: Checkout 🛎
	uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: Setup Node.js 🚀
	uses: actions/setup-node@v4
	with:
	node-version: 20

	- name: Setup npmrc 🔐
	run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > .npmrc

	- name: Install dependencies 📦
	run: npm install

	- name: Run tests 🧪
	run: npm test

	- name: Upload coverage report 📊
	uses: codecov/codecov-action@v5
	with:
	token: ${{ secrets.CODECOV_TOKEN }}

	- name: Build
	run: npx lerna run build

	- name: Configure Git 🛠
	run: \|
	git config --global user.email "[email protected]"
	git config --global user.name "Github Action"

	- name: Publish 🚀
	run: npx lerna publish --yes
	env:
	GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

Provide feedback