ci(release): add sigstore npm integration through --provenance

Primary Changes
----------------
1. Added provenance config to the publish workflows.

Fixes #2623

Signed-off-by: adrianbatuto <[email protected]>

.github/workflows/all-nodejs-packages-publish.yaml

@@ -21,6 +21,8 @@ concurrency:
 jobs:
   build-and-publish-packages:
     runs-on: ubuntu-22.04
+    permissions: 
+      id-token: write
     steps:
       - name: Print Workflow inputs.GIT_TAG_TO_PUBLISH
         run: |
@@ -58,6 +60,7 @@ jobs:
       - name: lerna-publish-npm
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: true
         run: |
           git config --global user.email "[email protected]"
           git config --global user.name "hyperledger-ghci"

.github/workflows/publish-npm.yaml

@@ -19,6 +19,8 @@ jobs:
 
   build-and-publish-packages:
     runs-on: ubuntu-22.04
+    permissions: 
+      id-token: write
     steps:
     - uses: actions/[email protected]
       with:
@@ -28,7 +30,7 @@ jobs:
       with:
         always-auth: true
         node-version: ${{ env.NODEJS_VERSION }}
-        registry-url: 'https://registry.npmjs.org'
+        registry-url: 'https://registry.npmjs.org/'
     - name: ./tools/ci.sh
       run: ./tools/ci.sh
       env:
@@ -39,6 +41,7 @@ jobs:
     - name: lerna-publish
       env:
         NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        NPM_CONFIG_PROVENANCE: true
       run: |
         git config --global user.email "[email protected]"
         git config --global user.name "hyperledger-ghci"