From 5edd1de5171193d19cf46b1651de793ba25e4489 Mon Sep 17 00:00:00 2001
From: Kien Nguyen <kien.nguyen@ledger.fr>
Date: Fri, 20 Sep 2024 18:04:55 +0200
Subject: [PATCH] =?UTF-8?q?=E2=9A=99=EF=B8=8F=20(jfrog):=20attest=20and=20?=
 =?UTF-8?q?sign=20tarball?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .changeset/config.json        |  2 +-
 .github/workflows/release.yml | 19 ++++++-------------
 2 files changed, 7 insertions(+), 14 deletions(-)

diff --git a/.changeset/config.json b/.changeset/config.json
index b1e91fc58..641058ad7 100644
--- a/.changeset/config.json
+++ b/.changeset/config.json
@@ -10,7 +10,7 @@
   "fixed": [],
   "linked": [],
   "access": "public",
-  "baseBranch": "feat/no-issue-jfrog-attest-sign-package",
+  "baseBranch": "develop",
   "updateInternalDependencies": "patch",
   "ignore": []
 }
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7838e6367..5ec5247a0 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,14 +1,12 @@
 name: publish npm packages
 on:
-  pull_request:
-  # push:
-  #   branches:
-  #     - main
+  push:
+    branches:
+      - main
 
 env:
   FORCE_COLOR: "1"
-  # NPM_REGISTRY: jfrog.ledgerlabs.net/artifactory/api/npm/ldk-npm-prod-public
-  NPM_REGISTRY: jfrog.ledgerlabs.net/artifactory/api/npm/ldk-npm-sandbox-green
+  NPM_REGISTRY: jfrog.ledgerlabs.net/artifactory/api/npm/ldk-npm-prod-public
 
 permissions:
   id-token: write
@@ -19,7 +17,7 @@ permissions:
 
 jobs:
   publish:
-    # environment: Production
+    environment: Production
     runs-on: ledgerhq-shared-medium
     steps:
       - uses: actions/checkout@v4
@@ -50,11 +48,6 @@ jobs:
         uses: changesets/action@v1
         with:
           publish: pnpm release
-          # to remove
-          title: "⚙️ (release) [NO-ISSUE]: Version packages"
-          commit: "⚙️ (release): Version packages"
-          branch: feat/no-issue-jfrog-attest-sign-package
-          createGithubReleases: false
         env:
           GITHUB_TOKEN: ${{ secrets.CI_BOT_TOKEN }}
       
@@ -86,7 +79,7 @@ jobs:
 
       - name: Attest tarball
         if: steps.changesets.outputs.published == 'true'
-        uses: actions/attest-build-provenance@v1
+        uses: LedgerHQ/actions-security/actions/attest@actions/attest-1
         with:
           subject-path: ./dist