.gitea/workflows/release.yaml

@@ -1,8 +1,6 @@
 name: Release
 on:
   push:
-    branches:
-      - main
 
 env:
   GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}

action.yml

@@ -20,7 +20,9 @@ runs:
       with:
         node-version: "lts/*"
     - name: Install dependencies
-      run: npm install semantic-release @saithodev/semantic-release-gitea @semantic-release/changelog @semantic-release/release-notes-generator commitlint-plugin-cleanfeet conventional-changelog-conventionalcommits @semantic-release/git
+      run: npm install semantic-release @saithodev/semantic-release-gitea @semantic-release/changelog
+    - name: Verify the integrity of provenance attestations and registry signatures for installed dependencies
+      run: npm audit signatures
     - name: Release
       env:
         GITHUB_TOKEN: ${{ inputs.GITHUB_TOKEN }}