Merge pull request #415 from zama-ai/chore/add-slsa-framework

chore: add SLSA provenance files
zama-ai · Jun 25, 2024 · 3e4855f · 3e4855f
2 parents ccad437 + 16dc1d1
commit 3e4855f
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 2 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -15,6 +15,7 @@ jobs:
       - run: cp .env.example .env
       - run: npm ci
       - run: npm run compile
-      - uses: JS-DevTools/npm-publish@0f451a94170d1699fd50710966d48fb26194d939
+      - uses: JS-DevTools/npm-publish@19c28f1ef146469e409470805ea4279d47c3d35c # v3.1.1
         with:
           token: ${{ secrets.NPM_TOKEN }}
+          provenance: true
diff --git a/.github/workflows/publishprerelease.yml b/.github/workflows/publishprerelease.yml
@@ -15,7 +15,8 @@ jobs:
       - run: cp .env.example .env
       - run: npm ci
       - run: npm run compile
-      - uses: JS-DevTools/npm-publish@0f451a94170d1699fd50710966d48fb26194d939
+      - uses: JS-DevTools/npm-publish@19c28f1ef146469e409470805ea4279d47c3d35c # v3.1.1
         with:
           tag: prerelease
           token: ${{ secrets.NPM_TOKEN }}
+          provenance: true
diff --git a/README.md b/README.md
@@ -21,6 +21,7 @@
   <a href="https://github.com/zama-ai/bounty-program">
     <!-- markdown-link-check-disable-next-line -->
     <img src="https://img.shields.io/badge/Contribute-Zama%20Bounty%20Program-%23ffd208?style=flat-square"></a>
+  <a href="https://slsa.dev"><img alt="SLSA 3" src="https://slsa.dev/images/gh-badge-level3.svg" /></a>
 </p>
 
 ## About