chore: updates ci

Signed-off-by: Case Wylie <[email protected]>

.github/workflows/attestation.yml

@@ -0,0 +1,30 @@
+name: npm attestation CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  attestations:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
+        with:
+          fetch-depth: 0
+
+      - name: Setup Node.js
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
+        with:
+          node-version: "lts/*"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
+        run: npm audit signatures

.github/workflows/node.js.yml

@@ -21,8 +21,7 @@ jobs:
           cache: npm
       - run: npm ci
       - run: npm run format:check
-      - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
-        run: npm audit signatures
+
   test:
     runs-on: ubuntu-latest
     strategy:

package.json

@@ -57,7 +57,7 @@
     "jest": "29.7.0",
     "nock": "13.5.4",
     "prettier": "3.2.5",
-    "semantic-release": "23.0.2",
+    "semantic-release": "23.0.1",
     "ts-jest": "29.1.2",
     "typescript": "5.4.2"
   },