changed perms to write and added gh token to upload step

Author: mpsc0x

.github/workflows/npm-publish.yml

@@ -6,7 +6,7 @@ on:
 
 permissions:
   id-token: write
-  contents: read
+  contents: write
 
 jobs:
   test:
@@ -63,6 +63,8 @@ jobs:
 
       - name: Upload release assets
         uses: softprops/action-gh-release@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
           files: |
             dist/bundle.js

scripts/publish.sh

@@ -7,4 +7,4 @@ PACKAGE_NAME=$(cat package.json | jq -r '.name')
 PUBLISH_VERSION=$(cat package.json | jq -r '.version')
 echo "Publishing ${PACKAGE_NAME}@$PUBLISH_VERSION"
 
-npm publish --access public
+npm publish --access public --provenance