From 6ec25ee51bbe311d259aab86ee3eedcb2cd255ca Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=99=BD=E7=86=B1?= <sonne@asaki.me>
Date: Mon, 6 Apr 2026 19:25:13 +0800
Subject: [PATCH] chore(ci): add npm provenance support (#6777)

---
 .github/workflows/release.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index bf90bc489d..6daa5d30b3 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -45,6 +45,9 @@ jobs:
         needs: [prepare]
         if: github.repository == 'dream-num/univer'
         runs-on: ubuntu-latest
+        permissions:
+            contents: read
+            id-token: write
 
         steps:
             - name: Checkout
@@ -78,6 +81,7 @@ jobs:
                   fi
               env:
                   NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+                  NPM_CONFIG_PROVENANCE: true
 
     build-demo:
         runs-on: ubuntu-latest