From 8d573a331eb41a71abffcf075a28f02fff64e084 Mon Sep 17 00:00:00 2001
From: Rabi Shanker Guha <rabi@thesys.dev>
Date: Wed, 10 Dec 2025 17:26:50 +0530
Subject: [PATCH] Add provenance flag to npm publish command & remove env token

---
 .github/workflows/publish-npm-package.yml | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/.github/workflows/publish-npm-package.yml b/.github/workflows/publish-npm-package.yml
index 26e8b14f2..022f626ea 100644
--- a/.github/workflows/publish-npm-package.yml
+++ b/.github/workflows/publish-npm-package.yml
@@ -40,6 +40,4 @@ jobs:
 
       - name: Publish package
         working-directory: ./js/packages/${{ inputs.package }}
-        run: pnpm publish --access public
-        env:
-            NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: pnpm publish --access public --provenance