Merge pull request #8 from ashblue/feature/updated-release-workflow

ci: another fix, yes another for the release

Author: ashblue

.github/workflows/workflow.yml

@@ -1,22 +1,38 @@
-name: CI
-on: push
+name: Release
+
+on:
+    push:
+        branches:
+            - main
+
 permissions:
-    contents: write
+    contents: read
+
 jobs:
-    test:
+    release:
+        name: Release
         runs-on: ubuntu-latest
+        permissions:
+            contents: write
+            issues: write
+            pull-requests: write
+            id-token: write
         steps:
-            - uses: actions/checkout@v3
+            - name: Checkout
+              uses: actions/checkout@v3
               with:
                   fetch-depth: 0
-                  token: ${{ secrets.GITHUB_TOKEN }}
-            - uses: actions/setup-node@v3
+                  persist-credentials: false
+            - name: Setup Node.js
+              uses: actions/setup-node@v3
               with:
                   node-version: 16
-            - run: HUSKY=0 npm ci
-            - run: npm run build
+            - name: Install dependencies
+              run: HUSKY=0 npm ci && npm run build
+            - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
+              run: npm audit signatures
             - name: Release
               env:
+                  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
                   NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
-                  GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
               run: npm run semantic-release