ci(publish): workaround provenance bug (#14996)

Author: bluwy

scripts/publishCI.ts

@@ -1,3 +1,8 @@
 import { publish } from '@vitejs/release-scripts'
 
-publish({ defaultPackage: 'vite', provenance: true, packageManager: 'pnpm' })
+// Check the tag passed in CI, and skip provenance if tag has `@` due to
+// https://github.com/slsa-framework/slsa-github-generator/pull/2758 not released
+const tag = process.argv.slice(2)[0] ?? ''
+const provenance = !tag.includes('@')
+
+publish({ defaultPackage: 'vite', provenance, packageManager: 'pnpm' })